Environment
- Carbon Black Cloud Sensor: All Supported Versions
- Microsoft Windows: All Supported Versions
Symptoms
Remote error 0x80070020 - The process cannot access the file because it is being used by another process
Cause
In Live Response's current implementation, if a file is opened with exclusive read access, Live Response will not be able to 'get' the file
Resolution
Carbon Black is investigating an enhancement within Live Response to improve functionality around restricted files
Related Content
