CB ThreatHunter: Threat Report IOC Does Not Execute Search Query

Products

• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

• Error visible on the Investigate page:
  • "Your query is invalid. Ensure a value is included and slashes, colons, and spaces are manually escaped."
• Investigate button selected next to an IOC within a Threat Report

Environment

• CB PSC Web Console: All Versions
  • ThreatHunter

Cause

The cause of this issue is currently under investigation

Resolution

The current workaround is the following:

• Within the Threat Report select the investigate icon at the top right of the PSC console next to the take action drop down menu