macOS Sensor Wrongly Identifying Parent Process for Processes Launchd via the XPC Service Framework
search cancel

macOS Sensor Wrongly Identifying Parent Process for Processes Launchd via the XPC Service Framework

book

Article ID: 376079

calendar_today

Updated On:

Products

Carbon Black Cloud Endpoint Standard (formerly Cb Defense) Carbon Black Cloud Enterprise EDR

Issue/Introduction

macOS sensor reports the incorrect parent path / process or lists the process as UNKNOWN. This has been noted for processes Launchd via the XPC service framework such as Google Chrome.

Resolution

This is currently being tracked under EA-24033 / DSEN-27241 and is targeted to be fixed in the upcoming 3.8.1 sensor release.

Powered by Wolken Software