Carbon Black Cloud: Why the Sensor Does Not Detect html Files

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

Why does the sensor not hash or detect .htm files?

Environment

• Carbon Black Cloud Sensor: All Supported Versions

Resolution

• As the user guide, section 'Background scan specifications' states, .htm or .html files are not scanned. 
• If these files have PE headers or are opened by a script host, then they would likely be scanned, since executions will be scanned regardless of extension.