Carbon Black Cloud: Is Windows Subsystem for Linux (WSL) fully supported?

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

Does the Carbon Black Cloud sensor work with WSL?

Environment

• Carbon Black Cloud Sensor: All Versions
• Microsoft Windows 10 version 1607 and Higher
• Microsoft Windows Server 2019

Resolution

No, full support of WSL with the sensor is not available.

Additional Information

• Since WSL is a file structure, the sensor may still block malicious events based on policies
• The sensor cannot recognize and track the underlying Linux executables and scripts nor assign reputation consistently