EDR: Sensor Installs Leave Behind User '1728054876'
search cancel

EDR: Sensor Installs Leave Behind User '1728054876'

book

Article ID: 288938

calendar_today

Updated On:

Products

Carbon Black EDR (formerly Cb Response) Carbon Black Hosted EDR (formerly Cb Response Cloud)

Issue/Introduction

Is it expected for sensor installations to leave behind files owned by user '1728054876' under directory 'var/opt/carbonblack/response/pkgs/'?

Environment

  • EDR Console: All Versions
  • EDR Linux Sensor: All Supported Versions

Resolution

  • These files are expected to be created during the sensor installation
  • The user is set when building the sensor packages 

Additional Information

These files are safe to be deleted if needed.