Carbon Black Cloud Sensor: Does the Linux Sensor Have Quarantine Capabilities?
search cancel

Carbon Black Cloud Sensor: Does the Linux Sensor Have Quarantine Capabilities?

book

Article ID: 289292

calendar_today

Updated On:

Products

Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Does the Linux sensor have the ability to quarantine (isolate) a machine?

Environment

  • Carbon Black Cloud Linux Sensor: 2.12 and Below
  • Linux OS: All Supported Versions

Resolution

  • The Linux sensor version 2.13 and above now have the ability to isolate a machine from the network
  • Version 2.12 and below do not have the ability to isolate

Additional Information

Other capabilities not available in the Linux sensor
  • Hash Banning
  • Unified Binary Store