Endpoint Standard: File description does not match file hash when file is within Docker container

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

Searching for a file name in Investigate intermittently shows the wrong hash for the file.

Environment

• Carbon Black Cloud: all versions
• Endpoint Standard sensor: all versions
• Docker containers: all versions
• Windows containers: all versions

Cause

VMware Carbon Black does not officially support container environments.

Resolution

Upgrade sensor to 3.6.0.1857 or later. This maintenance release bypasses all actions within containers to allow them to run uninterrupted.