IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

CB Response: How to Properly Terminate a Live Response Session

CB Response: How to Properly Terminate a Live Response Session

Environment

  • CB Response Server: All versions

Objective

To properly terminate a Live Response session and avoid unnecessary timeouts.

Resolution

While actively connected to a Live Response session:
  1. To detach from a session but leave it active:
# detach
  1. To fully end a session with the sensor:
# session close

 

Additional Notes

  • Sessions will timeout when they are not attached and active for five minutes.
  • Restarting the cb-liveresponse service will terminate all active sessions.
  • Each session has a unique numeric ID.
  • Up to 10 sessions can be running at one time, and multiple users can be attached to the same session.

Related Content


Labels (1)
Tags (2)
Was this article helpful? Yes No
0% helpful (0/1)
Article Information
Author:
Creation Date:
‎04-10-2019
Views:
2060
Contributors