Audit and Remediation

 View Only

Carbon Black Cloud Sensor Support for OSQuery

By Deborah Jay posted Sep 22, 2020 03:14 PM

  

Attention:

Support information for each Carbon Black Cloud Sensor is published on VMware Docs as distinct OERs. This UEX page will no longer be updated. Please see:


The following table shows which Carbon Black Cloud sensor versions support which versions of osquery for Audit and Remediation - Live Query.

Operating system Sensor version OSQuery version
Windows 3.8.0.398 4.8.0
Windows 3.7.0.1503 4.8.0
Windows 3.7.0.1411 4.7.0
Windows 3.7.0.1253 4.5.0
Windows 3.6.0.2076+ 4.5.0
Windows 3.6.0.1719+ 4.4.0
Windows 3.5.0.1627+ 4.1.2
Windows 3.4.0.1016+ 3.3.2
Windows 3.3.0.984 3.2.6
macOS 3.7.1 5.2.3
macOS 3.6.1 4.9.0
macOS 3.5.3 4.8.0
macOS 3.5.1 4.5.0
macOS 3.4.4 4.4.0
macOS 3.4.3  4.1.2
macOS 3.3.3 - 3.4.2 3.3.2
macOS 3.3.2 3.2.6
macOS 3.3.1 3.2.6
Linux 2.12.x 5.0.1
Linux 2.11.x 4.8.0
Linux 2.10.x 4.5.0
Linux 2.9.0-2.9.1 4.4.0
Linux 2.8.0-2.8.3 4.1.2
Linux 2.7.0-2.7.1 4.1.2
Linux 2.6.0 3.3.2
Linux 2.5.0  3.3.2
Linux 2.4.0 3.3.2
Linux 2.2.0 None
Linux 2.1.0 None

 

Notes:

  • Carbon Black does not support x86 architecture (Windows 32-bit) for Live Query in any sensor version because osquery does not support it.

 

Additional Resources:

 


#AuditandRemediation
1 comment
1 view

Permalink