Just Published! Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Carbon Black Cloud: What are the scripts in the IR folder used for?

Carbon Black Cloud: What are the scripts in the IR folder used for?

Environment

  • Endpoint Standard Sensor: 3.1.x - 3.5.x
  • Enterprise EDR Sensor: 3.3.x - 3.5.x

Question

What are the scripts PerfInfo.vbs, ProcInfo.vbs, and RttInfo.vbs in the IR folder used for?

Answer

The scripts purpose in life was to collect additional system information during diagnostic collection during an IR event.  That said, the scripts have outlived their purpose as we now recommend leveraging LiveOps or other means of obtaining system information.

The scripts have been deprecated and removed starting with the 3.6.x sensor and higher.

Related Content


Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎11-16-2020
Views:
281
Contributors