Blog Viewer

EDR: How to Force the Sensor to Check-In

By CB_Support posted Sep 10, 2020 02:13 AM

  

Environment

  • EDR Windows Sensor: All Supported Versions
  • EDR Linux Sensor: All Supported Versions
  • EDR MacOS Sensor: All Supported Versions

Objective

How to force the CB Response sensor to check in with the primary server via command line

Resolution

Follow steps below for the specific sensor OS:

Windows
  • Open up an elevated command prompt or powershell and run the following:
sc.exe control carbonblack 200

Linux
  • While logged in as root or running with sudo:
kill -n 10 $(pidof cbdaemon)

MacOS
  • Open a Terminal window and type:
sudo kill -s USR1 <pid of CbOsxSensorService>


 

Related Content



#EDR
0 comments
2 views

Permalink