Carbon Black Cloud: "Remote error 0x80070002" When Running Execfg With Sensor 3.6.0.1979

Products

• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

• "Remote error 0x80070002 - The system cannot find the file specified." When running execfg commands in live response
• This same command may work with different versions of the sensor

Environment

• Carbon Black Cloud: All Supported Versions
• Carbon Black Cloud Windows Sensor: 3.6.0.1979

Cause

This may occur because of an issue launching non-Microsoft Executables with some versions of the sensor

Resolution

Upgrade to sensor version 3.6.0.2072 or later