Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Carbon Black Cloud: How To Change ConfigProps Via cfg.ini Using RepCLI

Carbon Black Cloud: How To Change ConfigProps Via cfg.ini Using RepCLI

Environment

  • Carbon Black Cloud Sensor: 3.5.0.1627 and Higher
  • Microsoft Windows: All Supported Versions

Objective

How to enable ConfigProps locally via the cfg.ini file using RepCLI

Resolution

  1. Enable bypass mode on the sensor 
    repcli bypass 1
  2. Navigate to cfg.ini file and open with Notepad
  3. Add the ConfigProp name and desired value in the format: 
    ConfigPropName=Value
    
  4. Save changes to cfg.ini with "Save As" option; maintain the same file name and select a destination ex. C:\windows\temp\cfg.ini
  5. Move the old cfg.ini file out of original directory and keep as a backup
  6. Move the new cfg.ini file with the ConfigProp entry into original directory
  7. Update the config
    repcli updateconfig
  8. Disable bypass mode
    repcli bypass 0

Additional Notes

  • With the 3.5.0.1627+ sensor it is now possible to write / save Configprops to cfg.ini
  • Configprops can also be specified at install time as part of the install string
  • When the Rules Management System is deployed later this year these changes can be made via the console

Related Content


Was this article helpful? Yes No
100% helpful (1/1)
Article Information
Author:
Creation Date:
‎09-09-2020
Views:
2558
Contributors