Environment
- Carbon Black Cloud
- Endpoint Standard (formerly CB Defense)
- Enterprise EDR (formerly CB ThreatHunter)
- Audit & Remediation (formerly CB LiveOps)
Question
Why do some sensors display a name including <domain>\, while others only include the hostname?
Answer
When a sensor checks-in from a domain connected network, the <domain>\ will prefix the hostname. If this same sensor was to disconnect from the domain, or be part of "WORKGROUP", it will only display the hostname.
Additional Notes
There is currently no option to filter out the <domain>\ from being displayed.
