Cb ThreatHunter: Sensor only hashes the first 512MB of every file

Products

• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

When an executable is larger than 512MB Cb PSC sensor only hashes the first 512MB

Environment

Cb PSC Sensor: Version 3.4 and higher

Cause

The PSC sensor is currently coded to only hash the first 512MB of a file (UAV-554)

Resolution

This will be addressed in a future release