// Carbon Black registry path const std::string kCbRegLoc = "SOFTWARE\\CarbonBlack\\config"; ... queryKey("HKEY_LOCAL_MACHINE\\" + kCbRegLoc, results);
Is the correct location for the Carbon Black EDR product. • Formerly Carbon Black Response • Formerly the original "Carbon Black" company pre-mergers/pre-acquisitions. So it appears the carbon_black_info table is specific to the Carbon Black EDR Product. So likely could do with some naming/description updates in order to avoid confusion. I'm guessing your client has either CB Cloud or CB App Control products, and not the CB EDR Product?
// Carbon Black registry path const std::string kCbRegLoc = "SOFTWARE\\CarbonBlack\\config";