Cb Defense: What Is the Character Limit Length for Process Details?

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

What Is the Character Limit Length for Process Details within the PSC Console?

Environment

• Cb Defense PSC Console: All Versions

Resolution

The sensor limits the message to 1024 bytes.

Additional Information

• This message can include other information, so the cmdline will not be the full length of this anyway. Has been confirmed in Sensor versions 3.2 and 3.3.
• Additionally the Backend sets no specific limit. ElasticSearch field limit is 32KB, which is 32x the sensor limit.