Endpoint Standard: Able to Browse Unapproved USB Using Command Line
book
Article ID: 290106
calendar_today
Updated On:
Products
Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
Issue/Introduction
Ability to browse through directories on device despite the device being unapproved in Device Control.
Environment
- Endpoint Standard Web Console: November '20 Release (0.60) and Higher
- Carbon Black Cloud Windows Sensor: 3.6 and Higher
Cause
The sensor does not prevent users from running dir after changing directories into an unapproved device.
Resolution
This is expected behavior at this time.
Feedback
thumb_up
Yes
thumb_down
No