Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Carbon Black Cloud: User column showing current logged-in users instead of installer

Carbon Black Cloud: User column showing current logged-in users instead of installer

Environment

  • Carbon Black Cloud console (Formerly CB PSC)
  • Endpoint Standard Apple macOS Sensor:  3.3.2 and higher (Formerly CB Defense)
  • Endpoint Standard Microsoft Windows sensor: 3.5 and higher 
  • Apple macOS: All Supported Versions
  • Microsoft Windows: All Supported Versions
     

Symptoms

User column in endpoints page is showing current logged-in users instead of the user who installed the sensor

Cause

A change in behaviour of the sensor

Resolution

This is working as expected, the User column now shows the last user who is active on the endpoint
 

Additional Notes

  • Previously, the User column on the Endpoints, Investigate and Alerts (Endpoint Standard only) pages reflected the username of the account that installed the sensor.
  • The Linux sensor does not currently support this feature.

Related Content


Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎09-15-2020
Views:
652
Contributors