CarbonBlack2.html https://drive.google.com/drive/folders/11dtAE7hPiS13zjYNRal2A54VUueSPxmu https://docs.google.com/spreadsheets/d/10r0VEytsycKp59LH7jvTIB-ZXb902tyzD-V4YMllQU0/edit?ts=6018718e#gid=0 CompatChart ### ################################################################# ### RPM ### ################################################################# -- 6 and 7 ---------------------------------- uname -r cat /etc/os-release ---7 --------------------------------------- systemctl stop cbdaemon.service systemctl disable cbdaemon.service systemctl stop cbebpfdaemon.service systemctl disable cbebpfdaemon.service -- 6 ----------------------------------------- service cbdaemon status service cbdaemon stop chkconfig --del cbdaemon chkconfig | egrep cbdaemon -- 6 and 7 ---------------------------------- rpm -qa | egrep ^cb --- 7 ---------------------------------- yum remove cbsysd-v7.0.0.14291-1.x86_64 cbsensor-v7.0.0.14291-1.x86_64 cbebpf-v7.0.0.14291-1.x86_64 --- 6 ---------------------------------- yum remove cbsysv-v7.0.0.14291-1.x86_64 cbkmod-v7.0.0.14291-1.x86_64 cbsensor-v7.0.0.14291-1.x86_64 NOTE: Make sure all 3 are removed!! -- 6 and 7 ---------------------------------- cd /usr/local/src/ mkdir KROLL2 cd KROLL2 wget http://centosone.binghamton.edu/Upload/cb-psc-sensor-rhel-2.10.1.373013.tar mkdir TAR tar -xvf cb-psc-sensor-rhel-2.10.1.373013.tar mv cb-psc-sensor-rhel-2.10.1.373013.tar TAR ### ERROR_FILE="/var/opt/carbonblack/tmp/cberror" ### CIPHER_FILE="/var/opt/carbonblack/tmp/cbcipher" ./install.sh DT2DQSE8W4FNG#UB42V./install.sh G98C6177WAWY95DPA1O1 Starting install of cbagentd at Mon Feb 1 10:25:02 EST 2021. 2 Unpacking blade kit: cb-psc-lq-0.8.5822-5822-blade.tar.gz 3 Installing LiveQuery Blade 4 Unpacking blade kit: cb-psc-th-0.8.5863-5863-blade.tar.gz 5 Installing ThreatHunter Blade 6 Distro supported by kernel module 7 Kernel version 3.10.0-1160.11.1.el7.x86_64 does not meet the minimum 4.4 kernel requirement for BPF 8 Kernel version 3.10.0-1160.11.1.el7.x86_64 is not supported by BPF 9 Distribution CentOS Linux with a kernel version 3.10.0-1160.11.1.el7.x86_64 on x86_64 architecture is supported 10 Installing agent from /usr/local/src/KROLL/cb-psc-sensor-2.10.1-373013.el7.x86_64.rpm 11 warning: /usr/local/src/KROLL/cb-psc-sensor-2.10.1-373013.el7.x86_64.rpm: Header V4 RSA/SHA1 Signature, key ID 6ac57704: NOKEY 12 Created symlink from /etc/systemd/system/multi-user.target.wants/cbagentd.service to /usr/lib/systemd/system/cbagentd.service. 13 Registering agent against Predictive Security Cloud. 14 Successfully registered agent against Predictive Security Cloud. Success: agent was successfully installed. --- 7 ---------------------------------------- systemctl status cbagentd.service -- 6 ----------------------------------------- service cbagentd status ; ps -ef |egrep cb |egrep -v 'grep|bind' ### ################################################################# ### UBUNUTU ### ################################################################# systemctl stop cbdaemon.service systemctl disable cbdaemon.service dpkg -l |egrep "ii cb" |awk '{print $2}' apt remove cbebpf cbsensor cbsysd cd /usr/local/src/ mkdir KROLL2 cd KROLL2 wget http://centosone.binghamton.edu/Upload/cb-psc-sensor-ubuntu-2.10.1.373013.tar mkdir TAR tar -xvfcb-psc-sensor-ubuntu-2.10.1.373013.tar mv cb-psc-sensor-ubuntu-2.10.1.373013.tar TAR ./install.sh DT2DQSE8W4FNG#UB42V./install.sh G98C6177WAWY95DPA1O1 Starting install of cbagentd at Mon 01 Feb 2021 10:38:01 AM EST. 2 Unpacking blade kit: cb-psc-lq-0.8.5822-5822-blade.tar.gz 3 Installing LiveQuery Blade 4 Unpacking blade kit: cb-psc-th-0.8.5863-5863-blade.tar.gz 5 Installing ThreatHunter Blade 6 Distro supported by BPF probe 7 Distribution Ubuntu with a kernel version 5.4.0-65-generic on x86_64 architecture is supported 8 Installing agent from /usr/local/src/KROLL/cb-psc-sensor-2.10.1-373013.x86_64.deb 9 (Reading database ... 247406 files and directories currently installed.) 10 Purging configuration files for cb-psc-sensor (2.10.1-373013) ... 11 Selecting previously unselected package cb-psc-sensor. 12 (Reading database ... 247401 files and directories currently installed.) 13 Preparing to unpack .../cb-psc-sensor-2.10.1-373013.x86_64.deb ... 14 Unpacking cb-psc-sensor (2.10.1-373013) ... 15 Setting up cb-psc-sensor (2.10.1-373013) ... 16 Created symlink /etc/systemd/system/multi-user.target.wants/cbagentd.service → /etc/systemd/system/cbagentd.service. 17 Registering agent against Predictive Security Cloud. 18 Successfully registered agent against Predictive Security Cloud. Success: agent was successfully installed. systemctl status cbagentd.service -OR- service cbagentd status ; ps -ef |egrep cb |egrep -v 'grep|bind'