Environment
- PSC Console: All Versions
- CB Defense
- CB ThreatHunter
- PSC Sensor: All Versions
- Apple macOS: All Supported Versions
Question
If a command is run in the terminal which redirects output to a file, will the name of the file be shown in the Carbon Black Cloud Console?
command argument >> file_redirect
Answer
No. The output filename will not be recorded.
Additional Notes
This is a limitation of the operating system. When a command is run using IO redirection, the output file redirection is handled by zsh/sh/bash prior to the process creation and effectively removed from the command arguments. The subsequent call to execvp does not understand what file redirections are and cannot persist in the argument list accordingly.
Related Content
