Cb ThreatHunter: Sensor only hashes the first 512MB of every file
search cancel

Cb ThreatHunter: Sensor only hashes the first 512MB of every file

book

Article ID: 288138

calendar_today

Updated On:

Products

Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

When an executable is larger than 512MB Cb PSC sensor only hashes the first 512MB

Environment

Cb PSC Sensor: Version 3.4 and higher

Cause

The PSC sensor is currently coded to only hash the first 512MB of a file (UAV-554)

Resolution

This will be addressed in a future release