EDR: How to Utilize MAC Address for Sensor VDI
search cancel

EDR: How to Utilize MAC Address for Sensor VDI

book

Article ID: 286422

calendar_today

Updated On:

Products

Carbon Black EDR (formerly Cb Response)

Issue/Introduction

How to setup sensor VDI to utilize MAC Address

Environment

EDR Server: All Versions
EDR Sensor: All Versions

Resolution

  1. Open /etc/cb/cb.conf and enter the following configuration to the bottom of the file for Master and Minions
    NewRegistrationCallbackModulePath=/usr/share/cb/plugins/default_new_sensor_registration_callback_MacAddress.py
    NewRegistrationCallbackClassName=DefaultNewRegistrationCallback
  2. Download the file from the EDR secure link:
    1. 6.5.2 and below: default_new_sensor_registration_callback_MacAddress (6.x)
    2. 7.0.1 and above: default_new_sensor_registration_callback_MacAddress (7.x)
    • If you want to rename the file, make sure to use the filename in NewRegistrationCallbackModulePath=
  3. Copy the python script into to the /usr/share/cb/plugins folder
  4. Restart server services to ingest the change. 

Additional Information

Attachments

default_new_sensor_registration_callback_MacAddress.py get_app
default_new_sensor_registration_callback_MacAddr_Python3.py get_app