Enterprise EDR: Process Analysis page shows wrong PATH value for linux process
book
Article ID: 289137
calendar_today
Updated On:
Products
Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)
Issue/Introduction
Linux processes can have different process_names, parent_GUIDs, and parent_names in different segments and as a result, the search results displayed on the process analysis page are inconsistent.
Environment
Enterprise EDR Console: current
Enterprise EDR Sensor: 2.11.2-psc-lnx and 2.11.3-psc-lnx
Linux OS: All Supported Versions
Cause
Linux sensor process GUID generation behavior tracked in PSCLNX-9287.
Resolution
Upgrade to 2.12.0-psc-lnx sensor to resolve the issue.