Carbon Black Cloud: How to check current dynamic Sensor Management Content Manifests (macOS)
search cancel

Carbon Black Cloud: How to check current dynamic Sensor Management Content Manifests (macOS)

book

Article ID: 290067

calendar_today

Updated On:

Products

Carbon Black Cloud Endpoint Standard (formerly Cb Defense) Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Provide steps to check on the current revision of dynamic detection and prevention features (management content manifests) and the last date and time it was updated for a given Sensor

Environment

  • Carbon Black Cloud Console: All Versions
    • Endpoint Standard
    • Enterprise EDR
    • Audit & Remediation
    • Workload
  • Carbon Black Cloud Sensor: 3.5.3.x and Higher
  • Apple macOS: All Supported Versions

Resolution

  1. Launch terminal emulator
  2. Check for current ruleset revision
    sudo /Applications/VMware\ Carbon\ Black\ Cloud/repcli.bundle/Contents/MacOS/repcli status | grep -Ei --color "revision.*manifest"
  3. Output will show versions/revisions in use
    EEDR Reporting Revision[<rev#>]: Enabled(Manifest)
    Device Control Reporting Policy Revision[<rev#>]: Enabled(Manifest)

Additional Information

  • Each ruleset revision will have a number and show "Enabled(Manifest)" if the Sensor is getting updated regularly and functioning properly
    EEDR Reporting Revision[<rev#>]: Enabled(Manifest)
    Device Control Reporting Policy Revision[<rev#>]: Enabled(Manifest)