Endpoint Standard: Firefox logfile being terminated.

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

Alerts generated for the file backgroundupdate.moz_log being terminated.

Environment

• Endpoint Standard Sensor: 3.7.x.x and Higher
• Windows OS: All Supported Versions
• Mozilla Firefox

Cause

Alerts show  ttp:ATTEMPTED_CLIENT for  attempting to create a network connection

Resolution

Create a policy bypass rule for 
**\programdata\mozilla*\updates\*\backgroundupdate.moz_log
Operation Attempt: Performs any operation
Action: Bypass