Cb Protection: Blank “Banned File Written to Computer” Alerts
book
Article ID: 288311
calendar_today
Updated On:
Products
Carbon Black App Control (formerly Cb Protection)
Issue/Introduction
Receiving alerts for "Cb Protection: Blank “Banned File Written to Computer” that are missing fields.
Environment
Cb Protection Server: 7.x - 8.x
Cause
The file that triggered the alert has been deleted/no longer exists. When a "reminder" email is sent and the file has been deleted, it will be unable to pull the "file instance details" since it no longer exists.
Resolution
It is recommended to reset the alert right after deleting the file, or setting the reminder email to a longer time frame.