Enable Background On Carbon Black Cloud Sensors

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

Provides steps for turning on background scanning for all sensors in a given policy or a single sensor

Environment

• Carbon Black Cloud Console: All Versions
• Carbon Black Cloud Sensor: All Supported Versions
• Microsoft Windows: All Supported Versions
• Apple macOS: All Supported Versions

Resolution

All sensors in a policy

1. Go to Enforce > Policies
2. Select the desired Policy
3. Go to the Sensor tab
4. Check the 'Run background scan' option
5. Select either 'Standard' or 'Expedited' scanning options

   Select a background scan to run a one-time scan of online endpoints
   Standard (3-5 days) Recommended as a default
   Expedited (24 hours) Recommended for testing and emergency incidents
        System performance will be affected due to increased use of endpoint resources (CPU, memory, disk IO)
        Applies to Windows sensors version 3.3 and later

6. Click 'Save' for the Policy changes to take effect

A single sensor

1. Navigate to the Endpoints page
2. Select the desired Device Name (check-box on far-left)
3. Click the Take Action button
4. Select 'Enable background scan'
5. Select desired option (selected Device or listed Devices) and click 'Yes' in the confirmation window
6. 'Background Scanning Enabled' will display

Additional Information

• The steps above will not start another background scan if one has already started and/or finished
• Only one background scan will run per installation of the Carbon Black Cloud Sensor
• Changing the type of background scan (Standard, Expedited) will not start a new scan