EDR: How to Force the Sensor to Check-In

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

How to force the CB Response sensor to check in with the primary server via command line

Environment

• EDR Windows Sensor: All Supported Versions
• EDR Linux Sensor: All Supported Versions
• EDR MacOS Sensor: All Supported Versions

Resolution

Follow steps below for the specific sensor OS:

Windows

• Open up an elevated command prompt or powershell and run the following:

sc.exe control carbonblack 200

Linux

• While logged in as root or running with sudo:

kill -n 10 $(pidof cbdaemon)

MacOS

• Open a Terminal window and type:

sudo kill -s USR1 <pid of CbOsxSensorService>