Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Carbon Black Cloud: What file dates are displayed in a Live Response session

Carbon Black Cloud: What file dates are displayed in a Live Response session

Environment

  • Carbon Black Cloud Console: All Supported Versions
    • Endpoint Standard (Formerly CB Defense)
    • Enterprise EDR (Formerly CB ThreatHunter)
  • Carbon Black Cloud Windows Sensor: All Supported Versions

Question

What file dates are displayed in a Live Response session?

Answer

Currently, the file's last modified date is displayed (using GMT), you may run the following command to retrieve the file's last modified date, which will display the endpoint's local date/time:
 
execfg cmd.exe /c dir

 

Related Content


Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎05-03-2021
Views:
402