Carbon Black Cloud: Unable to Retrieve Files via Live Response

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

• Attempting to pull a file 2MB in size or larger fails
• Running memdump command and then trying to use PUT more likely to fail due to size

Environment

• Carbon Black Cloud Console: All Supported Versions
• Endpoint Standard Sensor: Version 3.0.x.x and Higher
• Live Response turned on in sensor's Policy

Cause

Built-in timeout in the process used for pulling files

Resolution

Unknown but this article will be updated when we have further information.