CB Protection: Are .cfg files tracked by the agent?
book
Article ID: 288547
calendar_today
Updated On:
Products
Carbon Black App Control (formerly Cb Protection)
Issue/Introduction
Does the CB Protection Agent track .cfg files on the endpoint?
Environment
- CB Protection Agent: All Supported Versions
Resolution
No, .cfg files are not tracked.
Additional Information
- CB Protection is only concerned with "interesting" files, meaning those files which are executable.
- This is determined by checking a file for a PE header, rather than simply relying on a file extension.
Feedback
thumb_up
Yes
thumb_down
No