Just Published! Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

EDR: How to Force the Sensor to Check-In

EDR: How to Force the Sensor to Check-In

Environment

  • EDR Windows Sensor: All Supported Versions
  • EDR Linux Sensor: All Supported Versions
  • EDR MacOS Sensor: All Supported Versions

Objective

How to force the CB Response sensor to check in with the primary server via command line

Resolution

Follow steps below for the specific sensor OS:

Windows
  • Open up an elevated command prompt or powershell and run the following:
sc.exe control carbonblack 200

Linux
  • While logged in as root or running with sudo:
kill -n 10 $(pidof cbdaemon)

MacOS
  • Open a Terminal window and type:
sudo kill -s USR1 <pid of CbOsxSensorService>


 

Related Content


Labels (1)
Tags (2)
Was this article helpful? Yes No
0% helpful (0/2)
Article Information
Author:
Creation Date:
‎09-09-2020
Views:
5642
Contributors