Cb Response: Does sensor detect shared drive file change?
search cancel

Cb Response: Does sensor detect shared drive file change?

book

Article ID: 289759

calendar_today

Updated On:

Products

Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Does the Cb Response Sensor detect shared drive file change?

Environment

  • Cb Response Sensor: All versions

Resolution

Response is process-oriented. It only records process behaviors. So if the process was not started on a host with a Response sensor, the sensor would not pick up any information on it. The sensor would only pick up the executable actions if it is in the shared drive.