This solution applies to Carbon Black versions earlier than v5.1.
Carbon Black OS X Sensor filemod events not displaying relative paths appropriately.
For example using SCP to copy a file to a remove OS X host running an OS X Sensor with the destination directory of ".":
scp myfile.txt myuser@host:.
The expectation would be hat the filemod event displays the full path to myfile.txt on the remote host, such as "/Users/myuser/myfile.txt". However, the path to the file is displayed as "./myfile.txt".
None. A fix is planned to be included in the Carbon black v5.1 OS X Sensor. Refer to OSX-179 in future release notifications.