IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

CB ThreatHunter: Why is Process Tree incorrect/blank? (pre-3.4.x.x)

CB ThreatHunter: Why is Process Tree incorrect/blank? (pre-3.4.x.x)

Environment

  • PSC Console: All Versions
    • CB Defense
    • CB ThreatHunter
  • PSC Sensor: 3.3.x.x and Lower
  • Process Tree on the Analysis page

Question

Why does the Process Tree show incorrect or no information for PSC Sensors on v3.3.x.x or before?

Answer

The information displayed in the Process Tree on the Analysis page (CB Defense + CB ThreatHunter, or CB ThreatHunter standalone) relies on the CB ThreatHunter data-stream. This information is provided by a 3.4.x.x Sensor or higher and will be unavailable for earlier Sensor versions.

Related Content


Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎09-09-2020
Views:
407
Contributors