Carbon Black Cloud: Malware Removal Page Missing Hash For MacOS

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Malware Removal Page shows no hash for MacOS devices

Environment

• Carbon Black Cloud Sensor: 3.x - 3.7.4
• MacOS: All Supported Versions

Cause

These events deal with Gatekeeper/XProtect

Resolution

There is an initiative to make it more apparent that these events deal with Xprotect / Gatekeeper and make it more apparent what happened. This is tentatively planned for the upcoming 3.8 sensor.