Carbon Black Cloud: Can the API pull information about whether a sensor is online or offline?

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Can an API query deteremine whether an enpoint is currently online or not?

Environment

• Carbon Black Cloud Console: All Versions

Resolution

• No, at this time the Carbon Black Cloud does not have a field to indicate whether an endpoint is online in real time.
• When querying endpoint information via the API, the last check in time is provided which will show how long it has been since the device's last check in.  This time is reported in millisecond epoch time and will require conversion to be useable.