Environment
- CB Live Query: Current Version
- Carbon Black Cloud Console: .38 Release and higher
- Carbon Black Cloud Sensor: Version 3.3 and higher
- Microsoft Windows: All Supported Versions
Question
Can contents of files be queried?
Answer
Contents of files cannot be queried using LiveQuery.
Additional Notes
LiveQuery uses OSQuery, and OSQuery does not support queries for file contents.
Related Content
#CarbonBlackCloud#AuditandRemediation