Why Is The Console Not Displaying The Full Command Line Of The Process In The Events?

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

Why is the App Control console not displaying the full command line of the process in the events?

Environment

• App Control Server: 8.5.4 and Higher

Resolution

• Some command line is not always caught by the App Control agent, as the agent may not consider it "interesting".
• The agent may see a script or powershell running, but have no visibility into what is running within the script or powershell.
• The agent sees process data, however it is not necessarily shown in the UI; this is why the data is seen in the agent logs but not the UI itself.