Enterprise EDR: Process Analysis page shows wrong PATH value for linux process

Products

• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Linux processes can have different process_names, parent_GUIDs, and parent_names in different segments and as a result, the search results displayed on the process analysis page are inconsistent.

Environment

• Enterprise EDR Console: current
• Enterprise EDR Sensor: 2.11.2-psc-lnx and 2.11.3-psc-lnx
• Linux OS: All Supported Versions

Cause

Linux sensor process GUID generation behavior tracked in PSCLNX-9287.

Resolution

Upgrade to 2.12.0-psc-lnx sensor to resolve the issue.