EDR: Does cb.exe make external IP connections?

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Does the EDR sensor make external IP connections

Environment

• EDR Sensor: All Supported Versions

Resolution

The sensor will not make external IP connections

Additional Information

• As of 6.4.2 sensors no longer reach out to CRL's (Certificate Revocation List) for binary signature info. Instead, the sensor utilizes only the certutil cache on the OS