EDR: How to Translate the CB Sensor Communication Error Code (HRESULT)

[#1]

Environment

• Carbon Black Response Sensor: All Versions
• Microsoft Windows: All Supported Versions

Objective

How to Translate the CB Sensor Connection Error Code (HRESULT)

Resolution

1. On the endpoint with sensor installed open Command Prompt as an Administrator
2. Change Directory to C:\Windows\CarbonBlack

   cd C:\Windows\CarbonBlack

3. Run "cb.exe -e <hresultcode>. Example:

   cb.exe -e 0x8007274d

Additional Notes

CB Response: What are the common sensor communication error messages? (HRESULT)

Related Content

• CB Response: Sensor not checking in behind firewall (0x80cc006e)
• CB Response: Sensors checking in intermittently (0x8007274c)
• CB Response: Windows Sensor log error: "HRESULT 0x80072747"
• CB Response: Sensorcomms.log shows HRESULT error 0x80c80006 for eventlog upload attempts
• CB Response: Sensor logs to collect for general troubleshooting
• https://docs.microsoft.com/en-us/windows/desktop/winsock/windows-sockets-error-codes-2