Endpoint Standard: How to Verify Sensor Status With RepCLI

[#1]

Environment

• Endpoint Standard (formerly Cb Defense) Sensor: 3.3.x.x and Higher
• Microsoft Windows: All Supported Versions

Objective

Verify status of Sensor with the RepCLI utility
 

Resolution

1. Launch a Command Prompt
2. Change directory to C:\Program Files\Confer

   cd C:\Program Files\Confer

3. Enter the following command

   repcli status

4. The following Sensor Status data will print to the command line

   General Info:
       Sensor Version
       Local Scanner Version
       Sensor State
       Details
       Kernel File Filter
       Background Scan
       Sensor Restarts
   Cloud Status:
       ServerAddress
       Registered
       Next Check-In
       Private Logging
   Queues:
       Reputation Resubmit
       Reputation Expedited
       Reputation Slow
       Report Messages
       LiveQueries
       File Uploads
       Diagnostic Status
       Debugging
       Kernel DebugLevel
       Maintenance Mode
   Enforcement Status:
       Policy
       Execution Blocks
       Network Restrictions
   Rules Status:
       Translation Flags
   Alarms:
       Assertions
       LogSeverityErrorsHigh

Additional Notes

• Authentication is not required to run the "repcli status" command
• The above list reflects the initial release of the 3.3 Sensor with RepCLI and is subject to change
• The "repcli status" command can be used to verify Sensor Status changes when using other RepCLI commands or sending commands from the Web Console

Related Content

Cb Defense: What is the RepCLI Utility?
Carbon Black Cloud: How to Access RepCLI Utility
Cb Defense: How to Enable Authentication for RepCLI Utility
Cb Defense: How to verify RepCLI Authentication Was Successfully Enabled