Environment
- CB Response Server: 6.3.0 and Higher
Question
When viewing the results of a binary search, users that don't have access to specific sensor groups will still see results related to the hostnames of the sensors in those restricted sensor groups.
Answer
This behavior is by design: while the user is unable to access those sensors, the user should still be able to see a list of hosts in the environment to know how prevalent the binary is and if this needs to go to a higher up in regards to a possible attack.
Related Content
