![]() ![]() ![]() ![]() sensor, the parameter AUTO_CONFIG_MEM_DUMP=0 allows administrators to opt-out of the user/kernel memory dump configuration when disk storage is limited, as the page file will take up the same space as the size of the installed RAM. For information on enabling kernel debugging please refer to Microsoft's documentation. and above, will allow to generate a kernel space memory dump (and user space dump, if kernel debugging is enabled) from a LiveResponse session. powershell) and thus sensor will not detect or block any AMSI activityĭefault is 1, which, in sensors 3. Any additional command options used and not listed here can cause the install to fail and will not be supported:ĭefault is true (enable AMSI) in Sensor 3.6 and above turning off this feature will prevent Carbon Black Vmware AMSI DLL, cbamsi.dll, from loading into any instances of AMSI-registered processes (e.g. Below is a list of the ONLY SUPPORTED command options.Msiexec /qn /i "C:\Users\UserFolderName\Desktop\installer_vista_win7_win8-64.msi" /L*vx log.txt COMPANY_CODE=12345678 POLICY_NAME=Phase1 BYPASS=1 This is an unattended install that will install the sensor and assign it to a previously created sensor policy and install the sensor in a bypassed state:.Msiexec /qn /i C:\Users\UserFolderName\Desktop\installer_vista_win7_win8-64.msi /L*vx log.txt COMPANY_CODE=12345678 POLICY_NAME=Phase1 This is an unattended install that will put the sensor into a specific policy that has already been created in the console:.Msiexec /qn /i C:\Users\UserFolderName\Desktop\installer_vista_win7_win8-64.msi /L*vx log.txt COMPANY_CODE=12345678 If you run it without this option, the installer will launch with the user interface and will ask for the 6 digit activation code which is used in the attended Windows install of the Carbon Black Cloud Sensor. Please note that unattended installation and use of the company code requires the /q command line option. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |