EDR: What extension set does 7.0.1+ macOS sensor use?
book
Article ID: 289869
calendar_today
Updated On:
Products
Carbon Black EDR (formerly Cb Response)
Issue/Introduction
What extension set does 7.0.1 macOS sensor use?
Resolution
- 7.0.1 macOS sensor uses kernel extensions on any macOS system before Big Sur (macOS 11.0.1).
- 7.0.1 macOS sensor uses system extensions on Big Sur.
Additional Information
The EDR sensor determines on its own which extension set to run. User can't change the set of extensions it uses.
Feedback
thumb_up
Yes
thumb_down
No