Cb Protection - Generate and collect sensor status information
Log In or Register to download the BES file, and more.

0 Votes

Description

This Task can be used to generate Carbon Black Protection Agent DasCLI status on a scheduled basis to collect details for the "Carbon Black Protection Agent Details" analysis, or on an ad-hoc basis on a given endpoint and upload it to the BigFix Server for troubleshooting purposes.

Property Details

ID21667
StatusProduction - Fully Tested and Ready for Production
TitleCb Protection - Generate and collect sensor status information
DomainBESC
CategoryTroubleshooting
SourceCarbon Black
Source SeverityN/A
Source Release Date1/21/2016 12:00:00 AM
KeywordsIBM BigFix & Carbon Black Integration Content
Is TaskTrue
Added by on 9/16/2016 11:50:45 AM
Last Modified by on 9/16/2016 11:50:45 AM
Counters 3699 Views / 123 Downloads
User Rating 1 star 2 star 3 star 4 star 5 star * Average over 0 ratings. ** Log In or Register to add your rating.

Relevance

isWindows (Relevance 1172)
Used in 1111 fixlets and 524 analyses   * Results in a true/false
Show indented relevance
windows of operating system
Used in 73 fixlets and 6 analyses   * Results in a true/false
Show indented relevance
version of client >= "9.0"
Used in 1 fixlet and 1 analsis   * Results in a true/false
Show indented relevance
(exists keys whose (value "DisplayName" of it = "Bit9 Agent") of key "HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall" of registry) OR (((value "DisplayVersion" of keys whose (value "DisplayName" of it = "Bit9 Agent") of key "HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall" of registry) as string as version | ("0.0" as version)) = ("7.2.2" as version))

Actions

Action 1 (default)

Action Link Click here to schedule DasCLI status generation for "Carbon Black Protection Agent Details" analysis.
Script Type BigFix Action Script
// generate DasCLI.exe status output
waithidden cmd.exe /s /c ""{value "ParityAgentInstallPath" of key "HKLM\Software\Bit9\Parity Agent" of registry as string & "dascli.exe"}" status > "{storage folder of client as string & "\bit9_dasclistatus.txt"}""
Success Criteria

This action will be considered successful when the applicability relevance evaluates to false.

Action 2

Action Link Click here to generate Carbon Black Protection Agent DasCLI status and upload it to the BigFix Server for troubleshooting purposes.
Script Type BigFix Action Script
// generate DasCLI.exe status output
waithidden cmd.exe /s /c ""{value "ParityAgentInstallPath" of key "HKLM\Software\Bit9\Parity Agent" of registry as string & "dascli.exe"}" status > "{storage folder of client as string & "\bit9_dasclistatus.txt"}""
    
// set max size to 15 MB to prevent too much data. If the zip file is to bigger than 15 MB the upload won't occur
setting "_BESClient_ArchiveManager_MaxArchiveSize"="15728640" on "{parameter "action issue date" of action}" for client
setting "_BESClient_ArchiveManager_OperatingMode"="2" on "{parameter "action issue date" of action}" for client
setting "_BESClient_ArchiveManager_FileSet-client"="{storage folder of client as string & "\bit9_dasclistatus.txt"}" on "{parameter "action issue date" of action}" for client

// upload results
archive now
Success Criteria

This action will be considered successful when the applicability relevance evaluates to false.


Sharing

Social Media:
Share this page on Yammer

Comments

Log In or Register to leave comments!