Environment
- Carbon Black Cloud Backend: All supported versions
- Carbon Black Cloud Sensor: All supported versions
- Operating Systems: Windows, Mac, Linux
Question
Which Admin Role is Used in Live Response Session?
Answer
- Windows: SYSTEM
- Mac: Root
- Linux: Root
Additional Notes
The role used in Live Response sessions could cause the difference between the result got from local view and LR session.
Related Content