CB Defense: Selecting "Actions" for IOC in Threat Report loads partial query in Investigation page
search cancel

CB Defense: Selecting "Actions" for IOC in Threat Report loads partial query in Investigation page

book

Article ID: 287768

calendar_today

Updated On:

Products

Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

  • Selecting the Investigate action for an IOC loads an investigate page with a truncated query
  • Error: "Your query is invalid. Ensure a value is included and slashes, colons, and spaces are manually escaped."

Environment

  • CB Defense Console: Current Version

Cause

The back-end truncates the query on improperly escaping certain characters including '&' and '=' 

Resolution

  • This issue will be resolved in a future back-end release
  • As a workaround, copy the query from the IOC page onto the Investigate page

Additional Information

Issue will be tracked with ID DSER-17417