The following table shows which Carbon Black Cloud sensor versions support which versions of osquery for Audit and Remediation - Live Query.
| Windows Sensor Version | osquery Version |
|---|---|
| 4.0.0.1292 | 5.9.1 |
| 3.9.2.2698 | 5.5.1 |
| 3.9.1.2691 | 5.5.1 |
| 3.9.1.2464 | 5.5.1 |
| 3.9.0.2357 | 5.5.1 |
| 3.8.0.722 | 5.2.3 |
| 3.8.0.684 | 5.2.3 |
| 3.8.0.627 | 5.2.3 |
| 3.8.0.535 | 4.8.0 |
| 3.8.0.398 | 4.8.0 |
| 3.7.0.1503 | 4.8.0 |
| 3.7.0.1411 | 4.7.0 |
| 3.7.0.1253 | 4.5.0 |
| 3.6.0.2076+ | 4.5.0 |
| 3.6.0.1719+ | 4.4.0 |
| 3.5.0.1627+ | 4.1.2 |
| 3.4.0.1016+ | 3.3.2 |
| 3.3.0.984 | 3.2.6 |
Note: Carbon Black does not support x86 architecture (Windows 32-bit) for Live Query in any sensor version because osquery does not support it.
