EDR: Direction of Cross-Process (crossproc) Event's are reversed

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

When looking at cross process (crossproc) events within the process analysis page, the source and target crossprocs are reversed; outgoing processes are displayed as incoming, and vice versa.

Environment

• EDR Server (formerly CB Response): 7.3.x and Below

Cause

This is due to an issue being tracked internally as CB-31139.

Resolution

• This is fixed in server version 7.4
• Upgrade to a supported version of EDR Server

Additional Information

This is a UI display issue only. The data stored in the database is correct.