CB Response: Is there a file size limit when using the Live Response GET function

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Is there a file size limit when using the Live Response GET function?

Environment

• CB Response 6.x
• Microsoft Windows Endpoints: All Supported Versions
• Apple MacOS Endpoints: All Supported Versions
• Linux Endpoints: All Supported Versions

Resolution

• There is no file size limit but there is a default session timeout of 300 seconds which will limit transfer by time.
• This can be changed by modifying the CbLRSessionTimeout parameter in /etc/cb/cb.conf on the Response server.

Additional Information

Modifying the cb.conf file will require a restart of the services to take affect