Cb ThreatHunter: How to Confirm the Sensor is Successfully Configured for Rules

Products

• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Confirm the sensor is successfully configured for rules

Environment

• Carbon Black ThreatHunter PSC Sensor: All Versions
• Microsoft Windows: All Supported Versions

Resolution

1. You will need to access the RepCLI utility. Cb Defense: How to Access RepCLI Utility
2. Check that the sensor has received and successfully ingested the dynamic rules

repcli querypolicy canonical