Retrieve a Sensor's GUID After Install Using Powershell

Products

• Carbon Black Cloud Audit and Remediation
• Carbon Black Cloud Enterprise EDR
• Carbon Black Cloud Endpoint Standard
• Carbon Black Cloud Workload
• Carbon Black Cloud Managed Detection and Response
• Carbon Black Cloud Managed Threat Hunting

Issue/Introduction

To retrieve the Globally Unique Identifier (GUID/UUID) or Product Code for the Carbon Black Cloud Sensor

Environment

• Carbon Black Cloud Sensor: All Versions
• Microsoft Windows: All Supported Versions
• Microsoft Powershell: All Versions

Resolution

1. Open Powershell
   • If using Windows 10:
     1. Right click on the Start button.
     2. Select "Windows PowerShell" from the list.
   • If using a Windows OS other than Windows 10:
     1. Right click on the Start button.
     2. Select "Run".
     3. Type in "powershell" and press Enter.
2. Type in:

get-wmiobject Win32_Product | sort-object -property Name | Format-Table IdentifyingNumber, Name, LocalPackage

3. Identify the name of the sensor as "Carbon Black Cloud Sensor 64-bit" under the Name column.
4. Find the GUID in the "IdentifyingNumber" number column to the left. 

Additional Information

• This action does not require Running as an Administrator
• Product Code/GUID can also be retrieved via PowerShell using Get-AppLockerFileInformation without Sensor installation