Carbon Black Cloud Sensor: Does the Linux Sensor Have Quarantine Capabilities?

Products

• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Does the Linux sensor have the ability to quarantine (isolate) a machine?

Environment

• Carbon Black Cloud Linux Sensor: 2.12 and Below
• Linux OS: All Supported Versions

Resolution

• The Linux sensor version 2.13 and above now have the ability to isolate a machine from the network
• Version 2.12 and below do not have the ability to isolate

Additional Information

Other capabilities not available in the Linux sensor

• Hash Banning
• Unified Binary Store