Environment
- Carbon Black Cloud Sensor: 3.x - 3.7.4
- MacOS: All Supported Versions
Symptoms
Malware Removal Page shows no hash for MacOS devices
Cause
These events deal with Gatekeeper/XProtect
Resolution
There is an initiative to make it more apparent that these events deal with Xprotect / Gatekeeper and make it more apparent what happened. This is tentatively planned for the upcoming 3.8 sensor.
