EDR: process analysis page does not show hits for all threat reports or watchlists

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

A process event only displays one Threat Report per Threat Intelligence Feed on the process analysis page, despite the process event containing multiple hits from other Threat Reports within the same Threat Feed.

Environment

• EDR Server: All Versions
• Hosted EDR Server: All Versions

Cause

This is due to an issue with the product.

Resolution

This issue is being tracked internally as CB-32959. VMWare Carbon Black Support will update this article when a target release date or version is known.