EDR: Does cb.exe make external IP connections?

EDR: Does cb.exe make external IP connections?

Environment

  • EDR Sensor: All Supported Versions

Question

Does the EDR sensor make external IP connections

Answer

The sensor will not make external IP connections

Additional Notes

  • As of 6.4.2 sensors no longer reach out to CRL's (Certificate Revocation List) for binary signature info. Instead, the sensor utilizes only the certutil cache on the OS

Labels (1)
Tags (2)
Was this article helpful? Yes No
0% helpful (0/1)
Article Information
Author:
Creation Date:
‎08-18-2020
Views:
178
Contributors