Carbon Black Cloud: Why are there no vulnerabilities displayed for VDI's?

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Why are there no vulnerabilities displayed for VDI's?

Environment

• Carbon Black Cloud: All supported versions
  • Vulnerability Assessment
• Windows: All supported versions
• Linux: All supported versions

Resolution

• To avoid showing vulnerabilities for non-persistent VDIs(short lived <24 hours), there is a wait of at least 24 hours for VDIs.
• Post 24 hours, the vulnerabilities get populated by the next scheduled daily run, hence overall delay could be up to 48 hours

Additional Information

https://community.carbonblack.com/t5/Knowledge-Base/Carbon-Black-Cloud-Which-devices-should-be-seen-in-Vulnerability/ta-p/108610