Cb ThreatHunter: Sensor only hashes the first 512MB of every file
book
Article ID: 288138
calendar_today
Updated On:
Products
Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)
Issue/Introduction
When an executable is larger than 512MB Cb PSC sensor only hashes the first 512MB
Environment
Cb PSC Sensor: Version 3.4 and higher
Cause
The PSC sensor is currently coded to only hash the first 512MB of a file (UAV-554)
Resolution
This will be addressed in a future release
Feedback
thumb_up
Yes
thumb_down
No