Enterprise EDR: Process Analysis page shows wrong PATH value for linux process
search cancel

Enterprise EDR: Process Analysis page shows wrong PATH value for linux process

book

Article ID: 289137

calendar_today

Updated On:

Products

Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Linux processes can have different process_names, parent_GUIDs, and parent_names in different segments and as a result, the search results displayed on the process analysis page are inconsistent.

Environment

  • Enterprise EDR Console: current
  • Enterprise EDR Sensor: 2.11.2-psc-lnx and 2.11.3-psc-lnx
  • Linux OS: All Supported Versions

Cause

Linux sensor process GUID generation behavior tracked in PSCLNX-9287.

Resolution

Upgrade to 2.12.0-psc-lnx sensor to resolve the issue.