CB Response: Volume letter is followed by a number in process search page results.

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• Why is a random number appending the volume/drive letter in the process search page ?
  • Example: C:0\ , C:9\, D:1\

Environment

• CB Response Sensor
• Microsoft Windows: All Supported Version

Resolution

• The CB Response Sensor will report on what the Windows OS tells it. The CB Response Sensor is not responsible for appending the digit following the driver letter, rather it is showing what can be seen within Resource Monitor under the Disk tab. This could be due to the way in which certain drives are mounted.