EDR: process analysis page does not show hits for all threat reports or watchlists
book
Article ID: 290692
calendar_today
Updated On:
Products
Carbon Black EDR (formerly Cb Response)
Issue/Introduction
A process event only displays one Threat Report per Threat Intelligence Feed on the process analysis page, despite the process event containing multiple hits from other Threat Reports within the same Threat Feed.
Environment
EDR Server: All Versions
Hosted EDR Server: All Versions
Cause
This is due to an issue with the product.
Resolution
This issue is being tracked internally as CB-32959. VMWare Carbon Black Support will update this article when a target release date or version is known.