EDR: Sensor Installs Leave Behind User '1728054876'

Products

• Carbon Black EDR (formerly Cb Response)
• Carbon Black Hosted EDR (formerly Cb Response Cloud)

Issue/Introduction

Is it expected for sensor installations to leave behind files owned by user '1728054876' under directory 'var/opt/carbonblack/response/pkgs/'?

Environment

• EDR Console: All Versions
• EDR Linux Sensor: All Supported Versions

Resolution

• These files are expected to be created during the sensor installation
• The user is set when building the sensor packages 

Additional Information

These files are safe to be deleted if needed.