CB Response: Case sensitive searches for syntax arguments?
search cancel

CB Response: Case sensitive searches for syntax arguments?

book

Article ID: 289783

calendar_today

Updated On:

Products

Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Is it possible to perform case sensitive searches within CB Response GUI for specific syntax arguments ?

Environment

  • CB Response Console: All Versions
  • CB Response Cloud: Current Version

Resolution

Currently it is not possible to perform case sensitive searches around syntax arguments.

Additional Information

The following examples below would return the same results, however each argument performs a different action based on case sensitivity.
 
process_name:ssh AND (cmdline:"ssh -l *")
 
process_name:ssh AND (cmdline:"ssh -L *")