Just Published! Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

CB Response: How does data suppression affect process queries?

CB Response: How does data suppression affect process queries?

Environment

  • CB Response: 6.x

Question

How does data suppression in the sensor group settings affect process queries?

Answer

  • Enabling data suppression in the sensor group settings impacts the way that the cmdline string searches.
  • With data suppression enabled, the command line string for all child processes are included in the command line string of the process you're searching on. 

Additional Notes

  • Child processes that qualify for suppression do not have their own process document.

Related Content


Labels (1)
Tags (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎02-21-2019
Views:
478
Contributors