Verify the Latest Local Scanner Signature Version

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

How to verify how recent the Local Scanner Signature Version is on an endpoint with the CBC sensor installed.

Environment

NOTE: This article doesn't apply to Mac or Linux Sensor (any version) as it doesn't include the local scanner component.
For a more permanent solution, work is underway to display VDF date natively in the product UI; This will be enabled by a future backend update.

• Carbon Black Cloud Console: All Versions
• Endpoint Standard Sensor: 2.0.1.x and higher
• Microsoft Windows: All Supported Versions

Resolution

From the Web Console

1. Go to the Sensor Management page
2. Search for the device in question
3. Expand the details by clicking on the chevron to the left of the Device Name header
4. Look at the Scan Engine information and copy the number string after vdf

   Scan Engine: 4.5.2.234-ave.8.3.46.6:avpack.8.4.2.70:vdf.8.14.20.54 ==> Copy 8.14.20.54

5. Use the method described in How To Determine Latest VDF Version and Date to check version and date history within last 90 days

 

From the Device/Sensor

1. Open the Command Prompt(cmd.exe)
2. Run the following command to see the Local Scanner Signature Version (VDF date)

   "C:\Program Files\Confer\RepCLI.exe" status | findstr /i vdfdate
           Local Scanner Version[4.15.14.50 - ave.8.3.66.106:avpack.8.5.2.130:vdf.8.20.3.132:apc.2.11.2.6:vdfdate.20230628]

3. Use the method described in How To Determine Latest VDF Version and Date to check version and date history within last 90 days

Additional Information

The VDF version can not be found in 'Programs and features' (or o/s equivalent) in the control panel, this just shows the base AV engine installed.