CB Defense: Notifications Not Shown in Local Sensor UI
search cancel

CB Defense: Notifications Not Shown in Local Sensor UI

book

Article ID: 287603

calendar_today

Updated On:

Products

Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

A Deny or Terminate action is not shown in the local sensor UI.

Environment

  • CB Defense Sensor: Version 2.x and Higher
  • CB DefenseĀ Sensor UI
  • CB Defense Web Console: All Versions

Cause

Sensor UI notifications for Network Operations (e.g., TCP or UDP connection) and API Calls (e.g., code injection, memory scrape, etc.) are not shown due to the intent of reducing pop-up fatigue.

Resolution

Search for the Deny or Terminate operation on the Investigate page within the CB Defense Web Console.

Additional Information

  • Process operations that are reported to the sensor UI include Process Create, File Actions, and Malware found by the local scanner.
  • Submit a Carbon Black support case if the notification does not include Network Operations or API Calls andĀ is, in fact, missing from the sensor UI.