Just Published! Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

EDR: How To Manually Enable and Disable The Sensor On A Windows Endpoint

EDR: How To Manually Enable and Disable The Sensor On A Windows Endpoint

Environment

  • EDR (formerly CB Response) Sensor: All Verisons
  • Microsoft Windows: All Supported Versions

Objective

How To Manually Enable and Disable The Sensor On A Windows Endpoint

Resolution

  1. Disable the sensor service and driver
    1. Open an Administrator Command Prompt on the endpoint 
    2. Run
net stop carbonblack
fltmc unload carbonblackk
  1. Enable the sensor service and driver
    1. Open an Administrator Command Prompt
    2. Run
fltmc load carbonblackk 
net start carbonblack
 

Labels (1)
Tags (2)
Was this article helpful? Yes No
100% helpful (1/1)
Article Information
Author:
Creation Date:
‎03-01-2019
Views:
1591
Contributors