EDR: How to manually uninstall a sensor from a Linux endpoint

[#1]

Environment

• EDR(Formerly Carbon Black Response) Sensor: All Supported Versions

Objective

To manually uninstall the CB Response Sensor software from a Linux endpoint. 

Resolution

• Log into the command line of the Linux endpoint.
• Prior to 6.2 sensor version, run the following:

/opt/cbsensor/sensoruninstall.sh

• If you are running Linux sensor 6.2 or higher, run the following command instead 

/opt/carbonblack/response/bin/sensoruninstall.sh

 

Related Content

CB Response: How to uninstall a corrupt Cb Response sensor
CB Response: Silently Uninstall Sensor on a Windows Machine
CB Response: How to uninstall a Sensor via cmd line when cbsetup.msi was used for installation
CB Response: Will uninstalled sensor records stay in the UI forever?
CB Response: Is it Possible to Prevent the Uninstall of the Sensor?
CB Response: Installed sensor is showing as uninstalled
CB Response: How to Bulk Uninstall Sensors