CB Defense: Selecting "Actions" for IOC in Threat Report loads partial query in Investigation page
book
Article ID: 287768
calendar_today
Updated On:
Products
Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)
Issue/Introduction
- Selecting the Investigate action for an IOC loads an investigate page with a truncated query
- Error: "Your query is invalid. Ensure a value is included and slashes, colons, and spaces are manually escaped."
Environment
- CB Defense Console: Current Version
Cause
The back-end truncates the query on improperly escaping certain characters including '&' and '='
Resolution
- This issue will be resolved in a future back-end release
- As a workaround, copy the query from the IOC page onto the Investigate page
Additional Information
Issue will be tracked with ID DSER-17417
Feedback
thumb_up
Yes
thumb_down
No