CB Response: API Process docs returning the same information for different processes

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• Viewing more than one process document using api/v2/process/<GUID> returns the first process information each time

Environment

• CB Response Server: 6.2.3 - 6.x

Cause

This is caused by a caching issue - CB-22552.

Resolution

• Upgrade to server version 6.4 or higher
• Workarounds
  • For on-prem environments, the process doc can be collected from the back-end - https://community.carbonblack.com/t5/Knowledge-Base/6-x-Query-Documents-Via-Curl-SSH-Terminal/ta-p/46718
  • From the UI, open a new browser for each process doc to be collected