View Traps Runtime Components on the Endpoint
Table of Contents
4.2 (EoS)
Expand all | Collapse all
-
- Set Up the Endpoint Infrastructure
- Activate Traps Licenses
-
- Endpoint Infrastructure Installation Considerations
- TLS/SSL Encryption for Traps Components
- Configure the MS-SQL Server Database
- Install the Endpoint Security Manager Server Software
- Install the Endpoint Security Manager Console Software
- Manage Proxy Communication with the Endpoint Security Manager
- Load Balance Traffic to ESM Servers
-
- Malware Protection Policy Best Practices
- Malware Protection Flow
- Manage Trusted Signers
-
- Remove an Endpoint from the Health Page
- Install an End-of-Life Traps Agent Version
-
-
- Traps Troubleshooting Resources
- Traps and Endpoint Security Manager Processes
- ESM Tech Support File
-
- Access Cytool
- View the Status of the Agent Using Cytool
- View Processes Currently Protected by Traps Using Cytool
- Manage Logging of Traps Components Using Cytool
- Restore a Quarantined File Using Cytool
- View Statistics for a Protected Process Using Cytool
- View Details About the Traps Local Analysis Module Using Cy...
- View Hash Details About a File Using Cytool
View Traps Runtime Components on the Endpoint
Use the cytool runtime query command
to view the status of Traps components on the endpoint. When a service
or driver is active, Cytool displays the state as Running.
When a service or driver is not running, Cytool displays the state as Stopped.
- Open a command prompt (as an administrator) or terminal and navigate to the Traps folder (see AccessCytool).
- To view the current runtime state of Traps drivers and
services, run the cytool runtime query command:You must enter the administrative password when prompted.Windows:
C:\Program Files\Palo Alto Networks\Traps>cytool runtime query Enter supervisor password: Service Startup cyverak Running cyvrmtgn Running cyvrfsfd Running cyserver Stopped CyveraService RunningMac:PANM2637HQ:bin jdoe$ sudo ./cytool runtime query Password: Name PID User Status Command traps_agent 358 jdoe Running /Library/Application Support/PaloAltoNetworks/Traps/bin/traps_agent.app/Contents/MacOS/traps_agent trapsd 55 root Running /Library/Application Support/PaloAltoNetworks/Traps/bin/trapsd authorized 82 root Running /Library/Application Support/PaloAltoNetworks/Traps/bin/authorized pmd 78 root Running /Library/Application Support/PaloAltoNetworks/Traps/bin/pmd kproc-ctrl 134 root Loaded com.paloaltonetworks.driver.kproc-ctrl