CB Response: Is there a mechanism to purge binaries by age / number of days old?

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Is there a mechanism to purge binaries by age / number of days old?

Environment

• CB Response Server: all versions

Resolution

 There is NO mechanism for number of days retention for binaries

Additional Information

This value in /etc/cb/cb.conf is used to configure the number of binaries to keep:

# AllianceClientStorefilePurgeMax 
# Specifies maximum number of store files that alliance client will purge from 
# local hard drive if it identifies that those files should not be stored 
# locally (i.e. if they were already uploaded to Alliance server) 
AllianceClientStorefilePurgeMax=100 (The default is 100 files)