Is it Possible to Prevent the Uninstall of the Sensor?

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Is it possible to prevent the uninstall of the Sensor? 

Environment

• EDR Sensor: 7.2 and Higher
• App Control (formerly CB Protection) Agent: 7.2 and Higher
• App Control Server: 8.x and Higher

Resolution

EDR Tamper Protection was introduced in the 7.2 Windows Sensor which will prevent the uninstall of the password without turning off tamper protection

Additional Information

• App Control has the Rapid Config "Carbon Black EDR Tamper Protection" which can be setup to prevent the uninstall of the Sensor but it won't prevent the service from being stopped