Enterprise EDR: macOS Process Tree shows circular relationship for Parent/Child processes

Products

• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Selecting the child process of a given parent process will display the parent process information for the selected child (same PID, SHA-256, etc)

Environment

• Enterprise EDR Web Console: All Versions
• Carbon Black Cloud macOS Sensor: 3.4.2.23
• macOS: 10.15.3 and higher

Cause

This issue is caused by a defect in the macOS sensor

Resolution

The resolution to this defect will be included in the 3.4.3.44 macOS GA sensor release.