CB PSC: Unable to add policy setting RUN_INMEMORY_CODE via API
Article ID: 290669
Updated On:
Products
Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
Issue/Introduction
Performing an API curl for CB Defense to add a new rule using the "operation": RUN_INMEMORY_CODE generates a "400 Bad Request" response
Environment
- CB Defense Web Console: 0.48
Cause
Known issue
Resolution
Carbon Black is aware of the issue and is working towards a resolution in an upcoming version of the backend
Additional Information
Workaround
As a workaround, post 2 separate rules to the policy to achieve the same result. Internally we map RUN_INMEMORY_CODE to 2 rules with PACKED and BUFFER_OVERFLOW operations. Making 2 requests to this API with 2 different operations as follows will achieve the same result as using RUN_INMEMORY_CODE:
As a workaround, post 2 separate rules to the policy to achieve the same result. Internally we map RUN_INMEMORY_CODE to 2 rules with PACKED and BUFFER_OVERFLOW operations. Making 2 requests to this API with 2 different operations as follows will achieve the same result as using RUN_INMEMORY_CODE:
operation: PACKED operation: BUFFER_OVERFLOW
Feedback
Yes
No
Powered by
