Is It Possible to Manually Ingest Sensor Data into the Server?

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Is it possible to manually ingest sensor data into the EDR server?

Environment

• Carbon Black EDR Server: All versions

Resolution

No, there is not a way to directly submit sensor data into the server. 

Additional Information

Event data can be copied to another connected sensor to submit the data from a disconnected machine in the event of an investigation. A machine that needs to be isolated from the internet can be set to "isolate" in the EDR console where communication will only be allowed between endpoint and server and no other network traffic.