EDR: Sensor Installs Leave Behind User '1728054876'
book
Article ID: 288938
calendar_today
Updated On:
Products
Carbon Black EDR (formerly Cb Response)
Carbon Black Hosted EDR (formerly Cb Response Cloud)
Issue/Introduction
Is it expected for sensor installations to leave behind files owned by user '1728054876' under directory 'var/opt/carbonblack/response/pkgs/'?
Environment
- EDR Console: All Versions
- EDR Linux Sensor: All Supported Versions
Resolution
- These files are expected to be created during the sensor installation
- The user is set when building the sensor packages
Additional Information
These files are safe to be deleted if needed.
Feedback
thumb_up
Yes
thumb_down
No