Just Published! Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

CB Response: Volume letter is followed by a number in process search page results.

CB Response: Volume letter is followed by a number in process search page results.

Environment

  • CB Response Sensor
  • Microsoft Windows: All Supported Version

Question

  • Why is a random number appending the volume/drive letter in the process search page ?
    • Example: C:0\ , C:9\, D:1\

Answer

  • The CB Response Sensor will report on what the Windows OS tells it. The CB Response Sensor is not responsible for appending the digit following the driver letter, rather it is showing what can be seen within Resource Monitor under the Disk tab. This could be due to the way in which certain drives are mounted.

Related Content


Labels (1)
Tags (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎09-09-2020
Views:
169
Contributors