EDR: How to Uninstall Sensor if MAC Kernel Panic Occurs

[#1]

Environment

• EDR (Formerly CB Response) sensors: All Supported Versions
• Apple macOS: All Supported Versions

Objective

To uninstall the EDR driver if a kernel panic is occurring.

Resolution

1. Boot into Recovery Mode
   • https://support.apple.com/en-us/HT201314\
2. Open Disk Utility, and mount the Macintosh HD
3. Close Disk Utility and in the top bar select Utilities > Terminal
4. Run commands:

   cd /Volumes/Macintosh HD/Library/Extensions 
   rm -rf CbOsxSensor*

5. Reboot and login normally
6. Uninstall the sensor 

Related Content

CB Protection: How to Uninstall the Agent if Mac Kernel Panic Occurs