Endpoint Standard: How to force signature pack definition updates using live response

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

Force sensor to update signature pack definitions using live response

Environment

• Carbon Black Cloud sensor: All supported versions
• Endpoint Standard Sensor: All supported versions  
• Microsoft Windows: All supported versions

Resolution

• From the console open a live response session:
  • Sensor version 3.6 and below Change Directory to C:\program files\confer and enter the below command: 

    execfg repcli updateavsignature -wait 
    OR 
    execfg repcli updateavsignature

    
     
  • Sensor version 3.7 and above Change Directory to C:\program files\confer and enter the below command: 

    execfg repcli localscanner updateSignature

Additional Information

Note: Commands differ by sensor version, run the following command to see what command applies to a particular sensor version if unsure 

execfg repcli