Enterprise EDR: macOS Process Tree shows circular relationship for Parent/Child processes
search cancel

Enterprise EDR: macOS Process Tree shows circular relationship for Parent/Child processes

book

Article ID: 290175

calendar_today

Updated On:

Products

Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Selecting the child process of a given parent process will display the parent process information for the selected child (same PID, SHA-256, etc)

Environment

  • Enterprise EDR Web Console: All Versions
  • Carbon Black Cloud macOS Sensor: 3.4.2.23
  • macOS: 10.15.3 and higher

Cause

This issue is caused by a defect in the macOS sensor

Resolution

The resolution to this defect will be included in the 3.4.3.44 macOS GA sensor release.