CB Response: Is it Possible to Remove Cmdline Passwords in the Console?

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Is it possible to remove the cmdline passwords in the console so analysts cannot see them being passed?

Environment

• Carbon Black Response Console: All Verisons

Resolution

No, this is not possible

Additional Information

• The Carbon Black Sensor collects information live. This means any information passed in a command line will be visible in the console
• There are other ways to enter passwords into command prompts which are generally safer than in clear text. Please research the best approach for your environment