Cb Response: Does sensor detect shared drive file change?
book
Article ID: 289759
calendar_today
Updated On:
Products
Carbon Black EDR (formerly Cb Response)
Issue/Introduction
Does the Cb Response Sensor detect shared drive file change?
Environment
Cb Response Sensor: All versions
Resolution
Response is process-oriented. It only records process behaviors. So if the process was not started on a host with a Response sensor, the sensor would not pick up any information on it. The sensor would only pick up the executable actions if it is in the shared drive.