Endpoint Standard: What Causes a Background Scan to Run?

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

What actions will trigger a background scan?

Environment

• Carbon Black Cloud Console: All Versions
• Carbon Black Cloud Sensor: 2.0.x.x and Higher (3.3.x.x for Expedited Scan)
• Microsoft Windows: All Supported Versions

Resolution

• Initial installation of the sensor into a policy where background scan is enabled
• Moving the sensor that was installed into a policy where background scan was disabled to a policy where it's enabled
• Running an on-demand scan with Repcli

Additional Information

Once a Background Scan has run to completion on a given machine, another one will not be run without either 1) uninstall/reinstall of Sensor or 2) using RepCLI to run an on-demand scan