EDR: How do you get started with Tamper Protection?

[#1]

Environment

• EDR Server:  7.4 and higher
• EDR Windows Sensor: 7.2 and higher

Question

How can Tamper Protection be enable and what is the impact on the endpoints?

Answer

1.  Download and review Engineering Overview of Tamper Protection document:

download:   https://transfer.vmware.com/download?domain=carbonblack&id=d3c24998d3f442bc8e9dcd202652d7e9&out=zip

2. Tamper Protection can be enabled per-group in Sensor Groups>Edit>Advanced section of the EDR UI.  Review Managing Sensors > Tamper Protection of Windows Sensors in the 7.7 User Guide or higher for details on configuration fields for the new Tamper Protection Feature.

 

Related Content

Tamper Protection of Windows Sensors
Advanced Settings