CB Protection: Are .cfg files tracked by the agent?
search cancel

CB Protection: Are .cfg files tracked by the agent?

book

Article ID: 288547

calendar_today

Updated On:

Products

Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

Does the CB Protection Agent track .cfg files on the endpoint?

Environment

  • CB Protection Agent: All Supported Versions

Resolution

No, .cfg files are not tracked.

Additional Information

  • CB Protection is only concerned with "interesting" files, meaning those files which are executable.
  • This is determined by checking a file for a PE header, rather than simply relying on a file extension.