There are two ways to enable and disable Live Response: through the cb.conf file or (if not set in cb.conf ), through the Carbon Black EDR console. Perform the following procedure to enable or disable Live Response through the console.
Prerequisites
If CbLREnabled
has no value (or is commented out) in the cb.conf file, an administrator can enable or disable Live Response in the console using a switch on the Advanced Settings page. This is the default setting in Carbon Black EDR version 6.3.0 and later.