Endpoint Standard: Able to Browse Unapproved USB Using Command Line

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

Ability to browse through directories on device despite the device being unapproved in Device Control.

Environment

• Endpoint Standard Web Console: November '20 Release (0.60) and Higher
• Carbon Black Cloud Windows Sensor: 3.6 and Higher

Cause

The sensor does not prevent users from running dir after changing directories into an unapproved device. 

Resolution

This is expected behavior at this time.