Just Published! Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

CB Response: How to search for processes with no cmdline

CB Response: How to search for processes with no cmdline

Environment

  • CB Response: All versions

Objective

Search for processes with empty cmdline line or the reverse:  search for processes with a non-empty cmdline

Resolution

  • To search for processes with *no* cmdline value, add:
-cmdline:*
  • To search for processes that have any cmdline value (not empty), add:
cmdline:*

Labels (1)
Tags (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎02-21-2019
Views:
309
Contributors