CB ThreatHunter: Processes only show child procs in both the investigate and process analysis pages. Netconns, regmods and filemods are missing.
book
Article ID: 288175
calendar_today
Updated On:
Products
Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)
Issue/Introduction
- Investigate page is missing netconns, regmods and filemods of a few processes
- Process analysis page is missing netconns, regmods and filemods of a few processes
- The effected processes are reported in the process search page with this query: legacy:true
Environment
- Enterprise EDR sensors: All versions prior to 3.4.3.44
- Enterprise EDR console: All versions
Cause
This is issue DSEN-8293.
Resolution
DSEN-8293 is fixed in the 3.4.3.44 sensor and after.
Feedback
thumb_up
Yes
thumb_down
No