IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

EDR: MacOS Running Sensordiag from Live Response Session

EDR: MacOS Running Sensordiag from Live Response Session

Environment

EDR Sensor: OSX 7.2.1
MacOS: OSX 10.15 - 12.1

Symptoms

Executing 'execfg sensordiag -type CDE' from Live Response within the directory /Applications/VMware Carbon Black EDR.app/Contents/Helpers results in the error "sh: sensordiag: command not found".

Cause

The spaces in the directory name requires escape characters or run the command within the Helpers directory.

Resolution

A)  Run from the default directory but escape the spaces in the directory string
execfg /Applications/VMware\ Carbon\ Black\ EDR.app/Contents/Helpers/sensordiag -type DE
or
B)  Move to the correct directory and run the command locally.
cd /Applications/VMware Carbon Black EDR.app/Contents/Helpers
execfg ./sensordiag -type DE
or 
C) Run from the Content directory.
cd /Applications/VMware Carbon Black EDR.app/Contents/.
execfg Helpers/sensordiag -type CDE

 

Related Content


Labels (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎02-14-2022
Views:
410
Contributors