Environment
- Carbon Black Cloud Linux Sensor: 2.12 and Below
- Linux OS: All Supported Versions
Question
Does the Linux sensor have the ability to quarantine (isolate) a machine?
Answer
- The Linux sensor version 2.13 and above now have the ability to isolate a machine from the network
- Version 2.12 and below do not have the ability to isolate
Additional Notes
Other capabilities not available in the Linux sensor
- Hash Banning
- Unified Binary Store
Related Content