PSC: macOS sensor signatures are blank/outdated

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Upon inspecting the Endpoints tab in the console portal, macOS devices don't show a green dot under the signatures column.

Environment

• Apple macOS: All Supported Versions
• CB Defense Sensor: 3.2.x, 3.3.x

Cause

Working as designed.

Resolution

Local AV signatures are not currently supported with the macOS sensors.  Future support is planned.
 

Additional Information

Hovering over the macOS device row, under the Signature column shows "Not available for Mac sensors".

It's important to keep in mind protection for macOS sensors is driven by behavioral analytics and cloud reputation, AV signatures is only a minor/complimentary component from the overall security posture perspective of the sensor.