Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

EDR: How to Verify the Hash of the Sensor

EDR: How to Verify the Hash of the Sensor

Environment

  • EDR Sensor: All Supported Versions
  • EDR Server: All Supported Versions

Objective

Ways to verify the hash of the sensors available to download from the console

Resolution

  1. Get the sha256 of the package on the server itself 
    sha256sum /usr/share/cb/coreservices/installers/CarbonBlackClientSetup-v7.3.2.18738.exe
  2. Get the sha256 from postgres 
    psql -p 5002 cb -c "select name, sha256 from sensor_build_packages where name = 'CarbonBlackClientSetup-v7.3.2.18738.exe'"

Additional Notes

  • When downloading the sensor .zip from the console they will contain a CarbonBlackClientSetup.exe which should have the same hash as the sensor version being downloaded as the sensor group customization is contained in the sensorsettings.ini
  • If the ability to view the sensor hash from the console would be useful please submit a feature request here

Related Content


Labels (1)
Tags (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎02-09-2023
Views:
366
Contributors