Just Published! Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

CB Response: Can The Minion A Sensor Reports Data To Be Changed On The Local Endpoint?

CB Response: Can The Minion A Sensor Reports Data To Be Changed On The Local Endpoint?

Environment

  • CB Response Server: All Versions
  • CB Response Sensor: All Versions
  • Microsoft Windows: All Supported Versions

Question

Can The Minion A Sensor Reports Data To Be Changed On The Local Endpoint?

Answer

  • No, the local endpoint registry does not keep an entry for the Minion node.
  • There is an Idea Request here for the ability to move a sensor from one node to another

Additional Notes

  • The minion assignment is stored in the sensor_registrations table on the CB Response Server in PSQL and the sensor keeps that data in the c:\Windows\Carbon Black\carbonblack.db file on the local endpoint in a protected database file. This is not something that can be manipulated on the endpoint. 

Related Content


Labels (1)
Tags (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎09-09-2020
Views:
237
Contributors