CB Defense: Why Is The Inbox Filled With Delete Hash Events?
search cancel

CB Defense: Why Is The Inbox Filled With Delete Hash Events?

book

Article ID: 289401

calendar_today

Updated On:

Products

Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

Why is the CB Defense Inbox getting a lot of Delete Hash Events, days after a "Permanently delete the application from all devices across your organization" was done

Environment

  • CB Defense PSC Console: All Versions
  • CB Defense PSC Sensor: 3.2.x and Higher
  • Microsoft Windows: All Supported Versions

Resolution

  • This happens because an event is created for each device in the org sending this request to all the devices in the org
  • Another event will happen for each device once it has checked in and this request has been processed