Carbon Black Cloud: How To Upload Files Using Live Response

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

How to Upload Files using Live Response to the remote device from local device.

Environment

• Carbon Black Cloud Console: All Versions
  • Audit & Remediation
  • Endpoint Standard
  • Enterprise EDR
• Carbon Black Cloud Sensor: All Versions
• Microsoft Windows: All Supported Version

Resolution

1. Launch Live Response from the console to the remote machine.
2. Run the following command line:

   put <folder path> (where the file should be copied)

3. A pop-up will appear on the local device, chose the respective file which needs to move to the remote device.
4. Once the file is selected, the pop-up will disappear and a message in the Live Response session will be updated as "File uploaded". The file will be uploaded to the remote machine.

Additional Information

Only one file can be upload at a time.