CBC API: What are the Sensor State values?

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

• What are the Sensor State values?

Environment

• Carbon Black Cloud API

Resolution

Sensor State value returned	Meaning
PANICS_DETECTED	Sensor is not functioning due to panics registered on the Sensor
LOOP_DETECTED	Sensor recognizes it is stuck in a processing loop and not able to function normally
DB_CORRUPTION_DETECTED	Sensor sees the local hash database is corrupted and not able to check hashes for reputation
SENSOR_UNREGISTERED	Sensor was installed in offline mode so it has not registered on the backend yet
WATCHDOG	not implemented
SENSOR_RESET_IN_PROGRESS	Sensor is refreshing Policy Rules and local information, will restart the Services so for that brief moment the Sensor is not functioning normally
SENSOR_SHUTDOWN	Sensor is shutting down due to powering off of Device, will try to send message to backend for this happening
SENSOR_MAINTENANCE	Backend sends this during maintenance, Sensor limits traffic to look-ups of Reputation and status checks
DEBUG_MODE_ENABLED	Sensor was installed with parameter to enable different logging options
AUTO_UPDATE_DISABLED	Sensor was installed with parameter to disable automatic Sensor Versions updates
SELF_PROTECT_DISABLED	Sensor was installed with parameter that effects tamper protection
VDI_MODE_ENABLED	Sensor was installed with parameter that flags the Device as VDI
POC_MODE_ENABLED	Sensor is in an Org that is in PoC mode that limits number of active Sensors
SECURITY_CENTER_OPTLN_DISABLED	Sensor was installed with parameter that disables the Windows Security Center
LIVE_RESPONSE_KILLED	Live Response session was terminated
CB_FIREWALL_INACTIVE	Sensor's Firewall is inactive