Carbon Black Cloud Sensor: Does the Linux Sensor Have Quarantine Capabilities?
book
Article ID: 289292
calendar_today
Updated On:
Products
Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)
Issue/Introduction
Does the Linux sensor have the ability to quarantine (isolate) a machine?
Environment
- Carbon Black Cloud Linux Sensor: 2.12 and Below
- Linux OS: All Supported Versions
Resolution
- The Linux sensor version 2.13 and above now have the ability to isolate a machine from the network
- Version 2.12 and below do not have the ability to isolate
Additional Information
Other capabilities not available in the Linux sensor
- Hash Banning
- Unified Binary Store
Feedback
thumb_up
Yes
thumb_down
No