- Open command line window as Administrator (right-mouse-> Run as Administrator)
- Run following commands to stop the sensor services:
net stop carbonblack
7.2.0 and Above:
fltmc unload carbonblackk
7.1.x and Below:
net stop carbonblackk
- Run following commands to confirm both services are stopped:
sc.exe query carbonblack
sc.exe query carbonblackk
- Run following commands to start services:
net start carbonblack
7.2.0 and Above:
fltmc load carbonblackk
7.1.x and Below:
net start carbonblackk
- (Optional) Following command will force the sensor to perform 'checkin' with the EDR Server:
sc.exe control carbonblack 200