Knowledge Base

Access official resources from Carbon Black experts

IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

Environment

CB Response Sensor: All Versions
CB Response Console: All Versions

Question

Does CB Response have a packet capture and inspection capability similar to Wireshark or TCPDump

Answer

No. Netconns are logged, but individual packets for inspection are not available.

Article Information

Author:

Creation Date:

‎09-09-2020

Views:

589

Privacy
Cookie Policy
Your California Privacy Rights

Knowledge Base

CB Response: Does CB Response have a Packet Capture function

CB Response: Does CB Response have a Packet Capture function

Environment

Question

Answer

EDR

Knowledge Base

CB Response: Does CB Response have a Packet Capture function

CB Response: Does CB Response have a Packet Capture function

Environment

Question

Answer

EDR

Thank you for your feedback.

Thank you for your feedback.