Just Published! Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Carbon Black Cloud: How to Find macOS Sensors Where Full Disk Access (FDA) Has Not Been Granted

Carbon Black Cloud: How to Find macOS Sensors Where Full Disk Access (FDA) Has Not Been Granted

Environment

  • Carbon Black Cloud Console
  • Carbon Black Cloud Sensor: All Supported Versions
  • Apple macOS: 10.14.5 and higher

Objective

Search for macOS Sensors in the console that do not have Full Disk Access (FDA) granted 

Resolution

1. Log in to the Carbon Black Cloud Console
2. Navigate to Inventory > Endpoints
3. Use the search bar to enter the following query:
sensorStates:FULL_DISK_ACCESS_NOT_GRANTED
4. The results will populate with Sensors that do not have FDA access enabled
 

Additional Notes


Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎05-18-2022
Views:
92
Contributors