Cb Protection: Blank “Banned File Written to Computer” Alerts

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

Receiving alerts for "Cb Protection: Blank “Banned File Written to Computer” that are missing fields.

Environment

Cb Protection Server: 7.x - 8.x

Cause

The file that triggered the alert has been deleted/no longer exists. When a "reminder" email is sent and the file has been deleted, it will be unable to pull the "file instance details" since it no longer exists.

Resolution

It is recommended to reset the alert right after deleting the file, or setting the reminder email to a longer time frame.