Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Carbon Black Cloud: Is FDA required for KEXT mode installation?

Carbon Black Cloud: Is FDA required for KEXT mode installation?

Environment

  • Carbon Black Cloud Sensor: 3.5.1.x and Higher
  • Apple macOS: All Supported Versions

Question

When installing the macOS Sensor in Kernel Extension (KEXT) mode, is full disk access (FDA) required?

Answer

Yes, FDA is required for the Sensor as a whole and not specific to mode (KEXT or System Extension).

Related Content


Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎02-04-2021
Views:
351
Contributors