Cb Response: How to start and stop Mac OSX sensors

[#1]

Environment

• Cb Response: All Versions
• Max OSX: All Versions

Objective

This document covers the commands to stop and start the sensor service running on a Mac endpoint.

Resolution

Commands should be run with as root or with sudo permissions

1. Stop the Response daemon
   

   launchctl unload /Library/LaunchDaemons/com.carbonblack.daemon.plist

2. Start the Response daemon
   

   launchctl load /Library/LaunchDaemons/com.carbonblack.daemon.plist