CB Defense: Sensor fails to parse path-based rules that start with a single blackslash (\)
search cancel

CB Defense: Sensor fails to parse path-based rules that start with a single blackslash (\)

book

Article ID: 289858

calendar_today

Updated On:

Products

Carbon Black Cloud Endpoint Standard (formerly Cb Defense) Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

  • Permission rulesĀ that start with a single blackslash will not take effect e.g. \path\**
  • Observe interop issues with apps such as Box and Google FileStream cloud file sharing apps

Environment

  • CB Defense PCS Console: All Versions
  • CB Defense PSC Sensor: 3.5 and below
  • Microsoft Windows: All Supported Versions

Cause

This happens due to a bug which prevents the sensor from parsing this path

Resolution

  • Workaround: Add wildcards before the backslash. e.g. *\path\
  • Fix: This has been resolved in Sensor versionĀ 3.5.0.1590