CB Response: Can The Minion A Sensor Reports Data To Be Changed On The Local Endpoint?

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Can The Minion A Sensor Reports Data To Be Changed On The Local Endpoint?

Environment

• CB Response Server: All Versions
• CB Response Sensor: All Versions
• Microsoft Windows: All Supported Versions

Resolution

• No, the local endpoint registry does not keep an entry for the Minion node.
• There is an Idea Request here for the ability to move a sensor from one node to another

Additional Information

• The minion assignment is stored in the sensor_registrations table on the CB Response Server in PSQL and the sensor keeps that data in the c:\Windows\Carbon Black\carbonblack.db file on the local endpoint in a protected database file. This is not something that can be manipulated on the endpoint.