CBC: Why do some sensors have DOMAIN names included in their name?
search cancel

CBC: Why do some sensors have DOMAIN names included in their name?

book

Article ID: 289428

calendar_today

Updated On:

Products

Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

Why do some sensors display a name including <domain>\, while others only include the hostname?

Environment

  • Carbon Black Cloud
    • Endpoint Standard (formerly CB Defense)
    • Enterprise EDR (formerly CB ThreatHunter)
    • Audit & Remediation (formerly CB LiveOps)

Resolution

When a sensor checks-in from a domain connected network, the <domain>\ will prefix the hostname. If this same sensor was to disconnect from the domain, or be part of "WORKGROUP", it will only display the hostname. 

Additional Information

There is currently no option to filter out the <domain>\ from being displayed.