CB Defense: No file information shown in console for .edb file

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

No file information (Hash, Reputation) is shown on an .edb file when an event is viewed in the console

Environment

• CB Defense Console: All Versions
• CB Defense Sensor: All Versions

Cause

The event being viewed was not as a result of a Background scan

Resolution

Only .edb files discovered as a result of a Background scan will display Hash & Reputation info

Additional Information

• Non-executable .edb files are processed by the background scanner, but other than that, only generate reputation requests to the backend when opened for execution, something that very rarely happens with this file type
• The User Guide states the following in relation to this file type - "The following file types are scanned in a Background Scan on endpoints that are running Windows."