Environment
- CB Response Server: 6.x and higher
Symptoms
- Results for searches using the field observed_filename returns binaries that do not match the name
- Loading a mismatched binary shows the search query result in the filepath
Cause
The field observed_filename will search for a match with the filepath
Resolution
This is performing as designed.
Additional Notes
Page 205 of the user guide describes this field to search for the full path of the binary at the time of collection.
Related Content