Files on Computers

The Files on Computers tab provides a table of files that are on agent computers or, for disconnected computers, were on those computers when their agents last communicated with the Carbon Black App Control Server.

Files from deleted computers can continue to display for one day, but will be marked as being from a deleted computer during that time and no longer display after the grace period.

By default, the Files on Computers table shows all individual files on all computers. You can select a different Saved View of the catalog or create a view to focus on particular types of files or search for one file. If you are not familiar with modifying views in console tables, see Console Tables. You also can turn off the Show individual files setting to instead show only top-level files (files not known to have been installed by or copied from another file) plus groups of initialized files (that is, files on a computer when the Carbon Black App Control Agent was installed). See Showing Individual Files before selecting this option.

The Search field provides a way to search for files by name (or partial name), Publisher, Company, Product Name or SHA-256. This reduces the length of the table and helps you find the files that you want.

Enter the search string you want to match. The list will dynamically update as you type or press Enter on the keyboard. A filter matching your search criteria displays above the search bar. Click Apply to apply the criteria to the table.

Tip: If you select Automatically apply before entering the search criteria, the table will update automatically. In the filter pane, click Reset to remove the filter from the table.

The Files on Computers tab includes the following subset of the Saved Views shown in Table: Saved Views on the File Catalog tab:

  • Applications by Publisher/Company
  • Banned Files
  • Categorized Files
  • Installed Programs
  • Malicious Files
  • Threat Report - Suspicious Files by Name
  • Unapproved Files

Table: File Details and File Catalog Page Fields shows the fields that can appear in the File Catalog table, most of which also can appear in the Files on Computer table. Table: Additional Fields: File Instance Details and Files on Computers shows additional fields that are available on the Files on Computers tab. Not all fields appear by default.