Knowledge Base

Access official resources from Carbon Black experts

IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

Environment

CB Response sensor: OSX, all versions
OSX: All versions

Question

Does OSX sensor collect cross-processes?

Answer

The answer is no.

Per page 93 of the 6.5 user guide found here (https://community.carbonblack.com/t5/Documentation-Downloads/CB-Response-6-5-User-Guide/ta-p/79704?a...) regarding events collected by sensors:

"(Windows only) Cross-processes (an occurrence of a process that crosses the security boundary of another process)"

Article Information

Author:

Creation Date:

‎09-09-2020

Views:

269

Copyright © 2005-2023 Broadcom. All Rights Reserved. The term “Broadcom” refers to Broadcom Inc. and/or its subsidiaries.