Cb Response - Deploy Windows Sensor v5.1.1.60603
Log In or Register to download the BES file, and more.

0 Votes

Description

This Fixlet will allow you to deploy the Carbon Black Response Sensor (v5.1.1.60603) for Windows.

Note: The Carbon Black Response Sensor Windows MSI for GPO Installation package for the desired profile will have to be placed in the Root Server's Uploads folder (..\BES Server\wwwrootbes\Uploads or /var/opt/BESServer/wwwrootbes/Uploads), and the actionscript of this Fixlet will have to be modified accordingly.  It can be downloaded via the Carbon Black Response Server interface under Administration -> Sensors -> Download Sensor Installer -> Windows MSI for GPO Installation.


Property Details

ID21662
StatusProduction - Fully Tested and Ready for Production
TitleCb Response - Deploy Windows Sensor v5.1.1.60603
DomainBESC
CategorySoftware Deployment
Download Size3560693
SourceCarbon Black
Source SeverityCritical
Source Release Date1/21/2016 12:00:00 AM
KeywordsIBM BigFix & Carbon Black Integration Content
Added by on 9/16/2016 11:50:37 AM
Last Modified by on 9/16/2016 11:50:37 AM
Counters 2263 Views / 110 Downloads
User Rating 1 star 2 star 3 star 4 star 5 star * Average over 1 rating. ** Log In or Register to add your rating.

Relevance

isWindows (Relevance 1172)
Used in 1084 fixlets and 523 analyses   * Results in a true/false
Show indented relevance
windows of operating system
Used in 73 fixlets and 6 analyses   * Results in a true/false
Show indented relevance
version of client >= "9.0"
Used in 1 fixlet   * Results in a true/false
Show indented relevance
(not exists keys whose (value "DisplayName" of it = "Carbon Black Sensor") of key "HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall" of registry) OR (((value "DisplayVersion" of keys whose (value "DisplayName" of it = "Carbon Black Sensor") of key "HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall" of registry) as string as version | ("0.0" as version)) < ("5.1.1.60603" as version))

Actions

Action 1 (default)

Action Link Click here to deploy this action.
Script Type BigFix Action Script
// Please modify the SHA1, Size, URL, and SHA256 values in the prefetch statement below to match your Carbon Black GPO Installer.
// Sample relevance clause that might help create an appropriate prefetch statement for a given file (be sure the file name is correct and does not contain spaces or special characters - or URL encode it):
// ("prefetch cbinstaller.zip sha1:" & sha1 of it as string & " size:" & size of it as string & " http://127.0.0.1:52311/Uploads/" & name of it & " sha256:" & sha256 of it as string) of file "cbinstaller.zip" of folder (value of setting "_BESRelay_HTTPServer_ServerRootPath" of client & "Uploads")
prefetch cbinstaller.zip sha1:721ad2e574d205dc666b35ebb41932fb433bb01b size:3582843 http://127.0.0.1:52311/Uploads/CarbonBlackGPOInstaller-5.11.60603-Internal%20AWS%20Clients.zip sha256:9fd70b764dc842f9733333139921a169a01b60adfa7d3ec3e8695dd865220a86

prefetch unzip.exe sha1:e1652b058195db3f5f754b7ab430652ae04a50b8 size:167936 http://software.bigfix.com/download/redist/unzip-5.52.exe sha256:8d9b5190aace52a1db1ac73a65ee9999c329157c8e88f61a772433323d6b7a4a
utility __Download\unzip.exe

waithidden __Download\unzip.exe -qq -o -d __Download\ __Download\cbinstaller.zip
waithidden msiexec.exe /i __Download\cbsetup.msi /qn /L*v "{pathname of windows folder & "\temp\cb.log"}"
Success Criteria

This action will be considered successful when the applicability relevance evaluates to false.


Sharing

Social Media:
Share this page on Yammer

Comments

Log In or Register to leave comments!
gjepsen -
comment on the bigfix.me site: everytime I hit the back arrow it freezes.