Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

EDR Sensor: What Is The Purpose Of "c:\windows\carbonblack\store\catalog"?

EDR Sensor: What Is The Purpose Of "c:\windows\carbonblack\store\catalog"?

Environment

  • EDR (formerly Cb Response) Sensor: All Versions
  • Microsoft Windows: All Supported Versions

Question

What is the purpose of "c:\windows\carbonblack\store\catalog"?

Answer

The c:\windows\carbonblack\store\catalog is used by the sensor to store a list of hashes that have been seen on the endpoint.

Related Content


Labels (1)
Tags (2)
Was this article helpful? Yes No
100% helpful (1/1)
Article Information
Author:
Creation Date:
‎02-11-2021
Views:
713
Contributors