Windows Subsystem for Linux (WSL) running a Carbon Black Cloud Sensor

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

Does the Carbon Black Cloud Linux sensor work with WSL?

Environment

• Carbon Black Cloud Sensor: All Versions
• Microsoft Windows 10 version 1607 and Higher
• Microsoft Windows Server 2019
• Windows Subsystem for Linux (WSL): Ubuntu All Versions

Resolution

No, full support of WSL with the sensor is not available.

Additional Information

• Since WSL is a file structure, the sensor may still block malicious events based on policies
• The sensor cannot recognize and track the underlying Linux executables and scripts nor assign reputation consistently