Just Published! Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Carbon Black Cloud: How to Enable/Disable Sensor Bypass on Sensors using Command Line (Windows)

Carbon Black Cloud: How to Enable/Disable Sensor Bypass on Sensors using Command Line (Windows)

Environment

  • Carbon Black Cloud: All Supported Versions
  • Carbon Black Cloud (Formerly PSC/CB Defense) Sensor: 2.0.x.x and Higher
  • Microsoft Windows: All Supported Versions

Objective

Provide steps to enable or disable the sensor bypass locally

Resolution

  1. Launch an elevated command prompt (cmd.exe > right-click > Run as Administrator)
  2. Run one of the following commands to place sensor in desired state:
    • Enable Bypass/Disable Protection 
      "C:\Program Files\Confer\Uninstall.exe" /bypass 1 <UninstallCode>
      Disable Bypass/Enable Protection
      "C:\Program Files\Confer\Uninstall.exe" /bypass 0 <UninstallCode>

Additional Notes

  • As of Carbon Black Cloud Sensor version 3.3.x.x and Higher, RepCli can also be used to enable or disable sensor bypass locally. See related content
  • These commands are only supported on the Windows Sensor
  • Uninstall code is case sensitive, it should be entered in upper-case

Related Content


Was this article helpful? Yes No
100% helpful (1/1)
Article Information
Author:
Creation Date:
‎09-09-2020
Views:
10498