CB Response: Volume letter is followed by a number in process search page results.
search cancel

CB Response: Volume letter is followed by a number in process search page results.

book

Article ID: 290190

calendar_today

Updated On:

Products

Carbon Black EDR (formerly Cb Response)

Issue/Introduction

  • Why is a random number appending the volume/drive letter in the process search page ?
    • Example: C:0\ , C:9\, D:1\

Environment

  • CB Response Sensor
  • Microsoft Windows: All Supported Version

Resolution

  • The CB Response Sensor will report on what the Windows OS tells it. The CB Response Sensor is not responsible for appending the digit following the driver letter, rather it is showing what can be seen within Resource Monitor under the Disk tab. This could be due to the way in which certain drives are mounted.