Cb Response: Does sensor detect shared drive file change?

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Does the Cb Response Sensor detect shared drive file change?

Environment

• Cb Response Sensor: All versions

Resolution

Response is process-oriented. It only records process behaviors. So if the process was not started on a host with a Response sensor, the sensor would not pick up any information on it. The sensor would only pick up the executable actions if it is in the shared drive.