App Control: Why Is The Console Not Displaying The Full Command Line Of The Process In The Events?
search cancel

App Control: Why Is The Console Not Displaying The Full Command Line Of The Process In The Events?

book

Article ID: 287173

calendar_today

Updated On:

Products

Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

Why is the App Control console not displaying the full command line of the process in the events?

Environment

  • App Control Server: 8.5.4 and Higher

Resolution

  • Some command line is not always caught by the App Control agent, as the agent may not consider it "interesting".
  • The agent may see a script or powershell running, but have no visibility into what is running within the script or powershell.
  • The agent sees process data, however it is not necessarily shown in the UI; this is why the data is seen in the agent logs but not the UI itself.