Enterprise EDR: Netconn_Count results vary between Investigate and Process Analysis pages

Enterprise EDR: Netconn_Count results vary between Investigate and Process Analysis pages

Environment

  • Carbon Black Cloud Web Console: All Versions
  • Enterprise EDR Windows Sensor: 3.4.x and newer
  • Enterprise macOS Sensor: 3.4.1.7 and newer
  • Microsoft Windows: All Supported Versions
  • Apple macOS:: All Supported Versions

Symptoms

  • Querying netconn_count displays differing results on Inbestigate page 
  • Process analysis page returns differnt number of netconns

Cause

VMware Carbon Black is investigating the discrepancy in the returned results between the pages.

Resolution

The article will be updated when there is more informaiton.

Related Content


Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎03-02-2021
Views:
56
Contributors