CB Response: How to get the 6.2.6 macOS Beta sensor

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

How to get the 6.2.6 macOS beta sensor for 10.15 Catalina support

Environment

Carbon Black Response Sensor: 6.2.6 Beta
macOS: All Supported Versions

Resolution

Install Package to Console:

1. Make sure all sensor groups are not set to automatically update to the latest that have macOS sensors included in them.
2. Log in the CB Response backend server via SSH/Terminal
3. Open /etc/yum.repos.d/CarbonBlack.repo
4. Comment out the current baseurl
5. Add the following baseurl

   baseurl=https://yum.distro.carbonblack.io/enterprise/beta/osx/x86_64/

6. After saving the file run "yum clean all"
7. Run the following command to download the package

   yum install --downloadonly --downloaddir=/tmp cb-osx-sensor-6.2.6.90808-1

8. Run the following command to install the package to the server

   rpm -i --force /tmp/cb-osx-sensor-6.2.6.90808-1.noarch.rpm

9. Run the following command to ingest the package to be downloadable via the console

   /usr/share/cb/cbcheck sensor-builds --update

Standalone Local Installer:

1. Create a new test group in the CB Response Console. 
2. Set the Upgrade Policy to not auto upgrade
3. Download the current install package from the console
4. Extract the sensorsettings.ini file from the zip
5. Download the CarbonBlackClientSetup.pkg from this link. 6.2.6 Standalone Beta Download
6. Place the CarbonBlackClientSetup.pkg and sensorsettings.ini file into a temporary folder on the machine
7. Install the sensor by double-clicking the CarbonBlackClientSetup.pkg

Additional Information

• Install of this sensor should not be on production machines
• Installing the 6.2.6 Beta sensor to the backend server for console download is not supported for CB Response Cloud Customers. Please use the Standalone installer instructions