Page Comparison

...

• CyberCNS provides a Single Downloadable Agent which can be used as a Probe (the so-called Regular or Network Agent) OR a Lightweight Agent OR Scan Agent. You can choose the correct agent configuration based on your requirement. This document provides a way to decide which configuration is best suitable.

• Navigate to Overview and click on Probes/Agents to download the Agent.

• CyberCNS has three different types of installations that can be used depending on the requirement. These are Probe, LightWeight, and Scan.

• Choose the OS Type as Windows/ Mac/ Linux, or ARM and download the required Probes / Agents (Probe/Lightweight/Scan) and copy it into the remote machine, and run the command.

• A Probe or Network Agent is typically installed on any one machine in the network and it will scan all assets in that defined network.

• A Lightweight agent on the other hand is installed on an end-user’s system and will only scan that particular asset (useful in work-from-home scenarios when the user is not on the corporate/office network).

• The agent will behave as a Probe or Lightweight agent depending on the command line arguments passed while installation. These commands to be used for installation and are readily provided in the CyberCNS console while downloading an agent.

• CyberCNS agent uses silent installation so it is easy to push through any RMM.

• Probe & Lightweight agents pulls pull the same information except, lightweight does not provide with Network Scan Findings. For lightweight agent, if NMAP is available, it will also be able to get information about Network Vulnerabilities.Network Scan Findings.

• For lightweight agent, if NMAP is available, it will also be able to get information about Network Vulnerabilities.

List of Supported Operation Systems for Agent Installation:

Introduction

• This document provides an overview of the various installation switches for an Agent and how they are used during the process of installation and post-installation. There are two ways:

...

🔸 cybercnsagent.exe that is used during installinstallation. 

🔹 Cybercnsagentv2.exe is the actual executable that runs the scan , and is created when you run the installation or run it on an asset.

...

To Install an agent as a probe/Lightweight Agent OR to Scan follow the below steps:-

1. Open Powershell as an administrator.

2. Use a copied command from the console to install. This contains information about your domain, company, etc.

...

• In case of command prompt as administrator is used please use the below-highlighted part of the command only.

• Navigate to the folder where the agent is downloaded. You may want to create a new folder and copy the CyberCNS agent into it as it gets installed into the same folder.

...

• The Probe is a Windows Service that is installed on the windows machine in the network you would be running scans on. The Windows Service runs under the local system permission but requires the following prerequisites

  • 4 core CPU on the machine

  • Minimum of 4 GB RAM for the first 1000 Assets and 1GB for every additional 500 assets.

  • Reach-ability to all the subnets needs to scan.

  • Ports 443 outbound opened to the installation domain <yourcompany>.mycybercns.com

  • Admin SMB shares permission to login into the remote system and fetch fetches required data.

• The Probe is useful for an office environment where you have controlled IP Addressing.

• It deploys the following techniques to get to the devices

  • Windows - It attempts to use the Admin SMB share to send a small executable called the Dissolvable agent that it then runs on the remote machine to fetch the details. It probes the shares using standard SMB tools and does an NFS discovery to check any NFS shares.

  • Active Directory - It uses SMB to query the users, and groups from the Credentials provided during the AD set up setup in the Master credentials.

  • Linux - It uses SSH credentials to log in to the box and figure out using Linux commands what is running on the machines.

  • Network Devices - It uses SNMP to discover the Sysobjectid and lookup look up the version of the device and then query the vulnerabilities for the version. It also connects to OEM APIs to get the vulnerability details.

• You can discover multiple subnets(CIDR/IP Range/Static IP) using a single Probe.

• The probe will require AD Credentials in the case of the AD environment for scanning purposes.

• In the Case case of a Non-AD Environment, if any central system is able to communicate with the other systems in the network it solves the purpose.

...

Installation Steps For Windows

1. Open Powershell as an administrator.

To Install as a Probe (example command-line script below).

...

• If Probe/ Lightweight is chosen then it installs the CyberCNS service into the agent system, whereas the Scan agent will only scan that system without installing a CyberCNS service. Using the installed service we can use a feature of the scheduler.

...

• Once the download is completed, select the option to Scan and run the command.

• Scan A scan agent will help to do a one-time scan.

...

• To uninstall cybercnsagentv2 using a command prompt

>run cmd as admin

...

Installation Steps For Mac

1. Download Mac/Apple agent from the company & open terminal.

2. At the terminal run >> Sudo Su

3. Navigate to the downloaded path and give executable permission for the installation script by using the below commands.

   Code Block
   chmod +x cybrcnsagent_darwin

To Install as a Probe

• If the OS Type is selected as Mac, then to install the LightWeight Agent follow the below step:-

...

• If Probe/ Lightweight is chosen then it installs the CyberCNS service into the agent system, whereas the Scan agent will only scan that system without installing a CyberCNS service. Using the installed service we can use a feature of the scheduler.

...

Installation Steps For Linux

1. Download Linux agent from the company & open terminal

2. At the terminal run >> Sudo Su

3. Navigate to the downloaded path and give executable permission for the installation script by using the below commands.

chmod +x cybrcnsagent_linux

...

Installation Steps for ARM(Raspberry Pi)

1. Download ARM agent from the company & open terminal

2. At the terminal run >> Sudo Su

3. Navigate to the downloaded path and give executable permission for the installation script by using the below commands.

chmod +x cybrcnsagent_arm

...

Debug Mode Command:-

In Windows

1. Open CMD or Powershell as administrator

2. Run "net stop cybercnsagentv2"

3. Run "cd C:\Program Files (x86)\CyberCNSAgentV2"

4. cybercnsagentv2.exe -m Probe -d

Debug Mode Command:-

In Linux

-->open terminal with privileged user

1. sudo su

2. systemctl stop cybercnsagentv2

3. cd /opt/CyberCNSAgentV2

4. ./cybercnsagentv2_linux -m Probe -d
   
   Debug mode for LighWeight Agent

5. ./cybercnsagentv2_linux -t LightWeight -d

Below are the primary executables in the CyberCNSAgentV2 (installation folder) to be whitelisted.

...

Proxy support for agent

Please use the option with the proxy format for an authenticated proxy:

-p username:password@IPaddress or Hostname:port

e.g. -p user:pass@proxy.example.me:3128

For unauthenticated Proxy

-p IPaddress or Hostname:port

e.g. -p proxy.example.me:3128

Tags support for LightWeight Agent

...