From fd1b873f75b1651e70bb1b2bde47a051a1a18786 Mon Sep 17 00:00:00 2001 From: cmprmsd <73472903+cmprmsd@users.noreply.github.com> Date: Tue, 6 Sep 2022 12:16:09 +0200 Subject: [PATCH] Add carbon black cloud sensor This adds known Carbon Black processes Signed-off-by: cmprmsd <73472903+cmprmsd@users.noreply.github.com> --- client/command/processes/ps.go | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/client/command/processes/ps.go b/client/command/processes/ps.go index ffbd4dcf97..65a4b726fc 100644 --- a/client/command/processes/ps.go +++ b/client/command/processes/ps.go @@ -39,6 +39,11 @@ var ( // Process Name -> [Color, Stylized Name] "ccSvcHst.exe": {console.Red, "Symantec Endpoint Protection"}, // Symantec Endpoint Protection (SEP) "cb.exe": {console.Red, "Carbon Black"}, // Carbon Black + "RepMgr.exe": {console.Red, "Carbon Black Cloud Sensor"}, // Carbon Black Cloud Sensor + "RepUtils.exe": {console.Red, "Carbon Black Cloud Sensor"}, // Carbon Black Cloud Sensor + "RepUx.exe": {console.Red, "Carbon Black Cloud Sensor"}, // Carbon Black Cloud Sensor + "RepWSC.exe": {console.Red, "Carbon Black Cloud Sensor"}, // Carbon Black Cloud Sensor + "scanhost.exe": {console.Red, "Carbon Black Cloud Sensor"}, // Carbon Black Cloud Sensor "MsMpEng.exe": {console.Red, "Windows Defender"}, // Windows Defender "smartscreen.exe": {console.Red, "Windows Smart Screen"}, // Windows Defender Smart Screen "CSFalconService.exe": {console.Red, "CrowdStrike"}, // Crowdstrike Falcon Service