search
cancel
Search
CB Response: Case sensitive searches for syntax arguments?
book
Article ID: 289783
calendar_today
Updated On:
Products
Carbon Black EDR (formerly Cb Response)
Show More
Show Less
Issue/Introduction
Is it possible to perform case sensitive searches within CB Response GUI for specific syntax arguments ?
Environment
CB Response Console: All Versions
CB Response Cloud: Current Version
Resolution
Currently it is not possible to perform case sensitive searches around syntax arguments.
Additional Information
The following examples below would return the same results, however each argument performs a different action based on case sensitivity.
process_name:ssh AND (cmdline:"ssh -l *")
process_name:ssh AND (cmdline:"ssh -L *")
Feedback
thumb_up
Yes
thumb_down
No