CB Response: How to generate Apple MacOS sensor report 6.1.3 and earlier

[#1]

Environment

• CB Response Mac Sensor: 6.1.3 and earlier
• Apple MacOS: All Supported Versions

Objective

Generate a cbdiag report for an Apple MacOS endpoint running CB Response Sensor version 6.1.3 and earlier.

Resolution

1. From a command line, execute:

sudo /Applications/CarbonBlack/sensordiag.sh

Additional Notes

• The resulting file will be generated in the current working directory.
• Resulting filename format:  sensordiag_(hostname)_(date).tgz 
• Sensor reports under 25 MB can be attached directly to a Carbon Black Technical Support case. 
• Files larger than 25 MB should be uploaded to CB Vault.

Related Content

• EDR: Generate Apple MacOS Sensor report in 6.2.x and later
• EDR: How to Collect Windows Sensor Diagnostics Logs (6.2.1 and below)
• EDR: How to gather Linux sensor diagnostics
• CB Response: How to generate sensor logs