Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

EDR: Sensor Installs Leave Behind User '1728054876'

EDR: Sensor Installs Leave Behind User '1728054876'

Environment

  • EDR Console: All Versions
  • EDR Linux Sensor: All Supported Versions

Question

Is it expected for sensor installations to leave behind files owned by user '1728054876' under directory 'var/opt/carbonblack/response/pkgs/'?

Answer

  • These files are expected to be created during the sensor installation
  • The user is set when building the sensor packages 

Additional Notes

These files are safe to be deleted if needed. 

Related Content


Labels (2)
Tags (3)
Was this article helpful? Yes No
0% helpful (0/1)
Article Information
Author:
Creation Date:
‎03-01-2023
Views:
275
Contributors