CB Protection: Are .cfg files tracked by the agent?

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

Does the CB Protection Agent track .cfg files on the endpoint?

Environment

• CB Protection Agent: All Supported Versions

Resolution

No, .cfg files are not tracked.

Additional Information

• CB Protection is only concerned with "interesting" files, meaning those files which are executable.
• This is determined by checking a file for a PE header, rather than simply relying on a file extension.