Enterprise EDR: macOS Process Tree shows circular relationship for Parent/Child processes
book
Article ID: 290175
calendar_today
Updated On:
Products
Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)
Issue/Introduction
Selecting the child process of a given parent process will display the parent process information for the selected child (same PID, SHA-256, etc)
Environment
- Enterprise EDR Web Console: All Versions
- Carbon Black Cloud macOS Sensor: 3.4.2.23
- macOS: 10.15.3 and higher
Cause
This issue is caused by a defect in the macOS sensor
Resolution
The resolution to this defect will be included in the 3.4.3.44 macOS GA sensor release.
Feedback
thumb_up
Yes
thumb_down
No