Environment
- Cb Response Sensor: All versions
Question
Does the Cb Response Sensor detect shared drive file change?
Answer
Response is process-oriented. It only records process behaviors. So if the process was not started on a host with a Response sensor, the sensor would not pick up any information on it. The sensor would only pick up the executable actions if it is in the shared drive.
