Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

[Cb Response] Announcing General Availability of 6.1.2 Windows and 6.1.2 macOS Sensors

[Cb Response] Announcing General Availability of 6.1.2 Windows and 6.1.2 macOS Sensors

Hello all,

Today, the Cb Response Team is announcing General Availability of the 6.1.2 Windows and 6.1.2 macOS sensors.  These sensor releases are primarily maintenance releases focused on bug fixes and stability improvements.

***Important Note: The 6.1.2 macOS sensor provides a workaround for the issue identified here: [Cb Response] Important Notice Related to MacOS 10.13.2 Beta.

We have added a safeguard into our 6.1.2 MacOS sensors (which supports MacOS 10.13.0 - 10.13.1) to prevent kernel panics if systems are upgraded to 10.13.2 Beta. This will prevent loading of Cb Response kernel extensions on MacOS 10.13.2 meaning that you will not have visibility into the activities on those systems. Full support for MacOS 10.13.2 will be included in a future MacOS sensor release.

For more details, please check out the release notes here:

Installing new sensors ---

To install the sensors into your server, run through the following instructions (in the case of a cluster, you only need to execute these steps on the master):

1) Ensure your yum repo is set appropriately

2) Run yum install --downloadonly --downloaddir=<local directory to download the package into> <package>

  • <package> is replaced by cb-sensor-6.1.2.71109-win or cb-osx-sensor

3) Run rpm -i --force <package downloaded> (for example: cb-sensor-6.1.2.71109-win-noarch.rpm) Then:

  • On 6.x servers -- Run /usr/share/cb/cbcheck sensor-builds --update

Your new sensor versions should now be available via the console. If you have any issues, please contact Carbon Black Technical Support.

Thanks!

The Cb Response Team

Labels (1)
Comments

Will the safeguard for MacOS 10.13.2 Beta 4 be carried forward and prevent kernel panics in future versions (such as 10.13.3 and beyond)? Or is this a one-time safeguard specific to MacOS 10.13.2 Beta 4?

Does the new sensor works with CB response 5.2.0.161004.1206 ? If so Can you share instruction for same .

pvz

No. With very limited exceptions, the sensor/agent version must always be less than or equal to the server/backend version across all 3 Carbon Black products (Cb Defense, Cb Response, Cb Protection).

Stated differently, older Sensors/Agents continue work with newer Servers/Backends, but not the reverse.

--

Patrick Van Zandt

Solutions Architect, Cb Professional Services

@Cb Team - can you provide instruction for installing CB sensor 6.x on CB Response server v 5 ?

As Patrick indicated above, v6.x sensors are not supported for v5.x servers.  You will need to upgrade the server if you are going to use the v6 sensors, otherwise use v5 sensors.

Hope this helps.

Article Information
Author:
Creation Date:
‎11-20-2017
Views:
4056
Contributors