Carbon Black Cloud: User column showing current logged-in users instead of installer

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

User column in endpoints page is showing current logged-in users instead of the user who installed the sensor

Environment

• Carbon Black Cloud console (Formerly CB PSC)
• Endpoint Standard Apple macOS Sensor:  3.3.2 and higher (Formerly CB Defense)
• Endpoint Standard Microsoft Windows sensor: 3.5 and higher 
• Apple macOS: All Supported Versions
• Microsoft Windows: All Supported Versions
   

Cause

A change in behaviour of the sensor

Resolution

This is working as expected, the User column now shows the last user who is active on the endpoint
 

Additional Information

• Previously, the User column on the Endpoints, Investigate and Alerts (Endpoint Standard only) pages reflected the username of the account that installed the sensor.
• The Linux sensor does not currently support this feature.