Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

EDR: How to confirm the Sensor is communicating with the server

EDR: How to confirm the Sensor is communicating with the server

Environment

  • EDR Server: All Supported Versions
  • EDR Sensor: All Supported Versions
  • Microsoft Windows: All Supported Versions

Objective

To confirm whether a Sensor is properly communicating with the backend EDR Server using only the Sensor itself. 

Resolution

  1. Log into the Windows endpoint as a user with Administrator privileges
  2. Open the C:\Windows\CarbonBlack\sensor.log file
All communication with the server will be documented there. Errors will indicate if there is a problem.  

Additional Notes

  • Similar communication is documented in the sensor.log file found on macOS and Linux operating systems. 

Related Content


Labels (1)
Tags (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎02-11-2021
Views:
1492
Contributors