EDR: Windows 11 Devices Display as Windows 10

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Why do Windows 11 devices (running build 10.0.2200) display as Windows 10 in the EDR console

Environment

• EDR Windows Sensor: 7.2.2 and lower
• Microsoft Windows 11

Resolution

Microsoft did not increment the build number's major version for Windows 11, so it is reported as build 10.0.2200, which was interpreted by the EDR 7.2.x sensors as Windows 10. Upgrading the sensor to 7.3.0 or newer will correctly display the Windows 11 version in the console.

Additional Information

• The displayed OS version was fixed as part of CB-37273