App Control: How to Enable Command Line Column in Report Events?

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

 Command line column is not enabled by default for any of the console login account groups, it should be enabled only for users that need it.

Environment

• App Control Console: All Supported Versions

Resolution

1. Login to the App Control console.
2. Click the configuration (gear) icon and choose Login Accounts
3. Enable the permission 'View process command lines' in the User or Role

Additional Information

• Command line data may include sensitive information such as passwords
• Only users with specific permission will see any data in the column or in any data exported to a CSV file
• Command line is only showing the first 512 characters

  Note: Pre-7.2.0 agents will not provide the process command line information