CB PSC: Search for Unsigned Module loads was returning both Signed and Unsigned Module loads
book
Article ID: 289792
calendar_today
Updated On:
Products
Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)
Issue/Introduction
Search for "modload_publisher_state:FILE_SIGNATURE_STATE_NOT_SIGNED" was returning both Signed and Unsigned Module loads.
Resolution
Waiting for bug fix.
Feedback
thumb_up
Yes
thumb_down
No