CB PSC: Search for Unsigned Module loads was returning both Signed and Unsigned Module loads
search cancel

CB PSC: Search for Unsigned Module loads was returning both Signed and Unsigned Module loads

book

Article ID: 289792

calendar_today

Updated On:

Products

Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Search for "modload_publisher_state:FILE_SIGNATURE_STATE_NOT_SIGNED" was returning both Signed and Unsigned Module loads.

Environment

  • CB PSC Server: 0.44

Cause

Bug DSER-14306.

Resolution

Waiting for bug fix.
Powered by Wolken Software