Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Carbon Black Cloud: How to Enable Full Disk Access for Sensor on macOS 10.14.5 and Higher

Carbon Black Cloud: How to Enable Full Disk Access for Sensor on macOS 10.14.5 and Higher

Environment

  • Carbon Black Cloud Sensor: All Supported Versions
  • Apple macOS: 10.14.5 and higher

Objective

Allow the Sensor full disk access in order to allow Sensor full visibility into User and Application data

Resolution


Additional Notes

  • Full Disk Access is not required for the Sensor to function, but it is required for the Sensor to be fully effective
  • Granting Full Disk Access is an additional step beyond kernel extension approval and does not replace that process
  • If FDA is not granted to the Sensor, end users may be prompted to grant the Sensor access when it attempts to access protected directories
  • If FDA is not granted to the Sensor, the events for those machines will include "access denied" messages when the Sensor attempts to access protected directories

Related Content


Was this article helpful? Yes No
100% helpful (1/1)
Article Information
Author:
Creation Date:
‎09-09-2020
Views:
5372
Contributors