Knowledge Base

  • Private Community
  • Private Community
 View Only

Endpoint Standard: When do hashes of sensor drivers change

By CB_Support posted Aug 25, 2021 09:31 PM

  

Environment

  • Endpoint Standard Sensor: All Versions
  • Microsoft Windows: All Supported Versions

Question

When does the hash value change for the following sensor drivers?
  • C:\Windows\System32\drivers\ctifile.sys
  • C:\Windows\System32\drivers\ctinet.sys
  • C:\Windows\System32\drivers\cbelam.sys
  • C:\Windows\Syswow64\ctintev.dll

Answer

  • The hash value may change between different sensor versions. 
  • They will not change unless the sensor is upgraded

Related Content



#EndpointStandard
#CarbonBlackCloud
0 comments
0 views

Permalink