IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

CB Response: Binary search for observed_filename returning binaries that do not match the name

CB Response: Binary search for observed_filename returning binaries that do not match the name

Environment

  • CB  Response Server: 6.x and higher

Symptoms

  • Results for searches using the field observed_filename returns binaries that do not match the name
  • Loading a mismatched binary shows the search query result in the filepath

Cause

The field observed_filename will search for a match with the filepath

Resolution

This is performing as designed. 

Additional Notes

Page 205 of the user guide describes this field to search for the full path of the binary at the time of collection. 

Related Content


Labels (1)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎03-05-2019
Views:
569
Contributors