You can use the following procedures to directly uninstall Carbon Black EDR Linux sensors on endpoints.


You must be a root user or have “sudoer” permissions and run the installer with “sudo”.


  1. If you are running Linux sensor 6.2 or later, run the following command:
  2. If you are running a version of the Linux sensor that is earlier than 6.2, run the following command:
    When this process is complete, the endpoint stops reporting events and binaries to the Carbon Black EDR server.