CB ThreatHunter: Reduced Event Data on February 20th-22nd, 2020
search cancel

CB ThreatHunter: Reduced Event Data on February 20th-22nd, 2020

book

Article ID: 285037

calendar_today

Updated On:

Products

Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

CB ThreatHunter event data may be reduced or missing between 11:40AM EST on February 20th, 2020 and 2AM EST on February 22nd, 2020

Environment

  • PSC Console: Jan '20 Release (0.52.0)
  • PSC Sensor: All Supported Versions
    • CB ThreatHunter

Cause

Backend issue caused messages to be rejected and dropped from some sensors

Resolution

  • A backend change has been implemented to address the issue; No events should have been dropped beyond 2AM EST on 02/22/2020
  • The dropped event data cannot be recovered

Additional Information

  • The issue has affected customers to a varying degree; For many the impact was minimal
  • It is recommended that you review events from the time period surrounding the dropped data and take action where necessary based on the findings
  • In case of questions or if assistance is needed interpreting the results of your findings, please open a Support case