Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

CB Response: How to Properly Terminate a Live Response Session

CB Response: How to Properly Terminate a Live Response Session

Environment

  • CB Response Server: All versions

Objective

To properly terminate a Live Response session and avoid unnecessary timeouts.

Resolution

While actively connected to a Live Response session:
  1. To detach from a session but leave it active:
# detach
  1. To fully end a session with the sensor:
# session close

 

Additional Notes

  • Sessions will timeout when they are not attached and active for five minutes.
  • Restarting the cb-liveresponse service will terminate all active sessions.
  • Each session has a unique numeric ID.
  • Up to 10 sessions can be running at one time, and multiple users can be attached to the same session.

Related Content


Labels (1)
Tags (2)
Was this article helpful? Yes No
0% helpful (0/1)
Article Information
Author:
Creation Date:
‎04-10-2019
Views:
1838
Contributors