Unable to access directories using CB Live Response

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

After establishing a Go Live Response session with a macOS sensor, attempting to change into a directory (using cd) produces:

Error: path <destination> does not exist. (computed absolute path: <full_path>) 

Environment

• EDR Server: All Versions
• EDR Sensor: All Versions
• MacOS: 10.15 and Higher

Cause

The CbOsxSensorService service does not have Full Disk Access permissions.

Resolution

Grant the CbOsxSensorService Full Disk Access permissions.