CB Response: Volume letter is followed by a number in process search page results.
book
Article ID: 290190
calendar_today
Updated On:
Products
Carbon Black EDR (formerly Cb Response)
Issue/Introduction
Why is a random number appending the volume/drive letter in the process search page ?
Example: C:0\ , C:9\, D:1\
Environment
CB Response Sensor
Microsoft Windows: All Supported Version
Resolution
The CB Response Sensor will report on what the Windows OS tells it. The CB Response Sensor is not responsible for appending the digit following the driver letter, rather it is showing what can be seen within Resource Monitor under the Disk tab. This could be due to the way in which certain drives are mounted.