Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

CBC: Why do some sensors have DOMAIN names included in their name?

CBC: Why do some sensors have DOMAIN names included in their name?

Environment

  • Carbon Black Cloud
    • Endpoint Standard (formerly CB Defense)
    • Enterprise EDR (formerly CB ThreatHunter)
    • Audit & Remediation (formerly CB LiveOps)

Question

Why do some sensors display a name including <domain>\, while others only include the hostname?

Answer

When a sensor checks-in from a domain connected network, the <domain>\ will prefix the hostname. If this same sensor was to disconnect from the domain, or be part of "WORKGROUP", it will only display the hostname. 

Additional Notes

There is currently no option to filter out the <domain>\ from being displayed.

Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎02-08-2024
Views:
225
Contributors