Carbon Black Cloud: Live Response Fails to 'Get' a File
Article ID: 289697
Updated On:
Products
Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)
Issue/Introduction
Remote error 0x80070020 - The process cannot access the file because it is being used by another process
Environment
- Carbon Black Cloud Sensor: All Supported Versions
- Microsoft Windows: All Supported Versions
Cause
In Live Response's current implementation, if a file is opened with exclusive read access, Live Response will not be able to 'get' the file
Resolution
Carbon Black is investigating an enhancement within Live Response to improve functionality around restricted files
Feedback
Yes
No
Powered by
