CB TheatHunter: Some netconn fields produce error: Field is not a valid field name

Products

• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

• Fields listed in the user guide cause an error during searches
  • "netconn_local_port" is not a valid field name.
  • "netconn_remote_port" is not a valid field name.

Environment

• CB ThreatHunter Console: .50

Cause

These fields are only available from the process analysis page of an event. 

Resolution

The search can only be run from an individual process page.