Environment
Carbon Black Cloud Console: Release-0.70.3 and earlier
Carbon Black Sensors: All versions
Symptoms
The IT_TOOL path to the .exe tool is corruped like so (missing backsplashes and other characters):
Approved IT_TOOL C:rogram Filesicroft Officeootffice16XCEL.EXE Imported from POC Fileupload
Cause
The input .csv record for IT_TOOL needs to be in double quotes and backslashes need to be "escaped"
Resolution
Format the csv file input path with a.) double quotes around the path and b.) backslash-escape the backslashes in the path as so:
WHITE_LIST,IT_TOOL,"C:\\Program Files\\Microsoft Office\\Root\\Office\\SAMPLE.EXE",Imported from POC,TRUE
Related Content
