Endpoint Standard: Malware Removal page is not showing Hash values for Mac Devices

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

• On Malware Removal Page entries will not have a Hash Value
• Using the Investigate Action button will load an empty Investigate page with no query
• Searching Device and "Gatekeeper or Xprotect" shows Events for the time value in First Seen in Malware Removal Page

Environment

• Carbon Black Cloud Console: Malware Removal Page

Cause

• Gatekeeper or Xprotect are taking actions on the process before the Sensor can log as normal

Resolution

A fix for this is still in development. When released this article will be updated. 

Additional Information

Work for this is being tracked as EA-20545.