What are the rules for Process Search Negation?

Products

• Carbon Black Cloud Enterprise EDR
• Carbon Black Cloud Endpoint Standard

Issue/Introduction

What are the rules for Process Search Negation in Carbon Black Cloud?

Environment

• Carbon Black Cloud Enterprise EDR: Current Version
• Carbon Black Cloud Endpoint Foundations: Current Version

Cause

Some query commands used to negate (NOT or -) values do not provide consistent results in the Investigate page, so understanding the rules of querying is required. 

Resolution

The documentation for Process Search Negation is found here in the Carbon Black Cloud User Guide.