EDR: Binary download results in 404
search cancel

EDR: Binary download results in 404

book

Article ID: 289962

calendar_today

Updated On:

Products

Carbon Black EDR (formerly Cb Response)

Issue/Introduction

  • Binary is listed in the UI, but selecting for download returns a 404
  • Binary metadata is available
  • The local sensor does not have the binary hash stored as seen

Environment

  • EDR Server: All Versions
  • Binary sharing settings disabled for one or more groups

Cause

When binary sharing is not enabled for one or more sensor groups, the binaries fail to upload due to a bug - CB-23019

Resolution

Until CB-23019 is fixed, binary sharing would need to be enabled for sensor groups