Carbon Black provides diagnostic scripts for each supported platform. These make it easy to collect the information most commonly required for troubleshooting.

Step 1: Navigate to the Carbon Black Directory

Open Terminal and change to the Carbon Black installation directory:

cd /Applications/CarbonBlack/ 

Step 2: Execute diagnostic script

The script requires elevated permissions to gather certain files.

sudo ./ 

The diagnostic package will be created in the current working directory, named using the following convention:


Step 3: Send The File

Send the file to your Red Canary Incident Handler from the portal via Administration > Share a File.  

Did this answer your question?