Carbon Black Cloud: How to identify VDI instances in the Endpoints page

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

How to identify VDI instances from the Endpoints page

Environment

• Carbon Black Cloud Sensor: All Supported Versions
• Microsoft Windows: All Supported Versions
• Supported Non-persistent VDI platforms

Resolution

The following query will help identify VDI instances from the Endpoints page:
 

_exists_:vdiBaseDevice