This article provides instructions on how to generate a SAML trace using SAML-Tracer, a Chrome browser extension or Firefox browser add-on. SAML-Tracer is a tool for viewing SAML and WS-Federation messages sent through the browser during single sign-on (SSO) and single logout. Download and Install Go to the Chrome Web Store or Firefox Browser ADD-ONS site, download and install […]
Apple has made changes starting with macOS High Sierra 10.13. These changes affect the ability to deploy software using kernel or security framework extensions in the enterprise. Malwarebytes Endpoint Protection and Endpoint Detection and Response for Mac uses a kernel extension for macOS 10.13, 10.14 and a security framework extension for macOS 10.15 to deploy […]
MacOS endpoints running Cisco IPSec VPN alongside Malwarebytes Endpoint Detection and Response may experience a loss of network connection if Network Events and Endpoint Isolation are enabled in your policy settings. This is limited to endpoints on MacOS 10.15 Catalina and 11.0 Big Sur due to a network protocol conflict. Resolution To resolve, update Mac endpoints running Cisco IPSec […]
Windows® Performance Toolkit (Xperf) is a command-line tool used for monitoring to produce in-depth performance profiles of Windows operating systems and applications. These logs help the Malwarebytes Support team investigate performance issues with Windows devices. Create an Xperf log To run the Xperf command-line tool, install the SDK available on Microsoft’s support site: Windows 10 […]
Emotet is a banking Trojan that can steal data by eavesdropping on your network traffic. Its goal is to steal user credentials. Emotet is commonly spread by email, both using infected attachments as well as by embedded URLs in the email that download this Trojan. Due to the way Emotet spreads through your network, any […]
The Malwarebytes Support Tool command line version is used to cleanup and remove Malwarebytes products. The Support Tool removes Malwarebytes Endpoint Security and Malwarebytes Endpoint Protection, including their files, settings, and license information. To remove Malwarebytes software from a Windows endpoint, download the Support Tool, then run it from the Command Prompt. In the Command […]
If a managed Windows or Mac endpoint encounters issues with the Malwarebytes Endpoint Agent, you may need to collect diagnostic logs for investigation, or to submit them to our Support team for troubleshooting the issue. This article explains how to generate diagnostic logs via the Malwarebytes Nebula console, and how to manually collect them from […]
To verify a Malwarebytes Endpoint Protection is running, you can download and run the ServiceStatus.cmd script on the endpoint. Download and run Service Status script Download the attached script zip file (see below) and extract ServiceStatus-x.xx.cmd.txt to the endpoint computer. Rename the file to be ServiceStatus-x.xx.cmd Administrator privileges are not required to run the script, as it uses only standard […]
Under your Profile is a License Information screen that displays total endpoints in use, number of purchased seats, expiration date and license key for each product you’ve purchased. This article explains how to locate your license information. View your License Information At the top right of the screen, click your display name > Profile > License Information tab. Here you can view the details of your […]
Some Malwarebytes Nebula actions may be performed by command line to help with custom scripting or automation by software deployment and remote monitoring and management (RMM) tools. The Endpoint Agent Command-line tool, EACmd, is a Windows™ application created to communicate with the Endpoint Agent service. This article covers suggested methods of using EACmd in your scripts […]