67 docs tagged with "Knowledge Base"

Optional protections including uninstall protection, service stop detection, and file tamper detection for Endpoint Sensors

Comparison of API Version 1 and Version 2

Authenticating to the Cyberhaven API

Shared troubleshooting for deploying Cyberhaven browser extensions across Chrome, Edge, and Firefox

How the Windows Sensor detects BSOD events and safely disables the driver to prevent restart loops, plus steps to re-enable

Case Status Definitions

Structure of CEL query language and how to use it

Content Capture File Names

User actions that trigger Cyberhaven tag scanning, content inspection, and content capture.

Steps to test API authentication and validate event output from the Cyberhaven API within the console

Information about Cyberhaven's release structure, release cadence, sensor deployment options, and end-of-support policy

Frequently asked questions about Cyberhaven’s Data Catalog.

Attribute references for filtering and analyzing Cyberhaven dataflows

Reference of action names used in Cyberhaven dataflows.

Conceptual overview of dataset management, table fields, performance panel, and impact on past events.

Email to Case Disabled

Enable screen capture permission message

Prerequisites and setup guide for enabling Data at Rest Scanning (DARS) and OneDrive Cloud Sensor

Comprehensive coverage matrix for Cyberhaven Endpoint Sensor tracing and blocking capabilities

Reference for Endpoint Sensor attributes available in the Cyberhaven Console and APIs

Event Lineage Workflow - From Incident to Full Event Chain

Column definitions for the Events table — what each attribute means

Frequently asked questions about Chrome Extension 25.1.1 update, including installation, impact, and transition to self-hosting

Finding Windows Product GUID

Inaccurate Counts in Risks Overview

Conceptual overview of the Inspection Policies tab, table fields, performance panel, and policy update behavior.

Troubleshooting guide for investigating when browser extension fails to capture upload events

Complete list of Linux Sensor processes and filesystem paths recommended for security tool exclusions

Conceptual overview of list types, table fields, and validation behavior.

Filter Cyberhaven dataflows by endpoint hardware serial numbers

Side-by-side comparison of Performance and Coverage approved application lists for macOS blocking.

Troubleshooting guide for macOS CPU performance issues with Cyberhaven sensor

macOS Sensor deployment and MDM profile requirement

macOS Sensor Support Notice EOL 24.04

Use Jamf extension attributes to detect tampering of the Cyberhaven macOS Sensor and trigger remediation

Enable or lock the Cyberhaven Safari App Extension using DDM on macOS Sequoia and later

Deploy the Cyberhaven Safari extension using Mosyle with Apple Apps and Books (VPP)

Enable the Cyberhaven Safari extension using Jamf Pro Blueprints

Enable or lock the Cyberhaven Safari extension using Declarative Device Management in SimpleMDM

Outlook plugin Disabled

Policy for Inactive Support Cases

Overview of Cyberhaven policy types, default inspection behavior, and policy exclusions.

Policy Override Behavior

Conceptual overview of policy severity, response actions, throttling, overrides, messaging, and secondary actions.

Conceptual overview of the Protection Policies tab, table fields, and performance panel insights.

Guidance on proxy settings and behavior for Cyberhaven Endpoint Sensor

Removing Inactive Sensors

Conceptual overview of saved query exclusion logic and table fields.

View and manage health of deployed sensors, required actions, and platform-specific considerations

Sensor ProfilesFrequently Asked Questions.

Support Portal Access

Support Portal Overview

Reference table showing which file types support Cyberhaven content scanning and OCR

How the Sensor traces and buffers events when devices are offline

Diagnose and resolve issues with Cyberhaven Office plugins, including Outlook Classic, the New Outlook add-in, and Word, Excel, and PowerPoint integrations.

Check service status, stop/start/restart the Linux Sensor, and generate diagnostics

Steps to stop/start, uninstall, gather diagnostics, profile performance, and handle installer rollback issues on Windows

How macOS Sensor 25.07 changes blocking scope using approved application lists to optimize performance.

How Cyberhaven licenses the Endpoint Sensor and how endpoints are counted

How to uninstall the Cyberhaven Linux Sensor on RHEL/Oracle Linux and Ubuntu/Debian

Steps to uninstall the Cyberhaven Sensor when Uninstall Protection is enabled on Windows and macOS

Methods for uninstalling the Cyberhaven Windows Sensor manually or via SCCM/Intune, including Uninstall Protection requirements

Troubleshooting guide for unsupported browser settings configuration errors and version requirements

Guidance on managing Cyberhaven Endpoint Sensor upgrades and version rollouts

Windows install command line variables

Windows security tool exclusions

Processes and filesystem paths used by the Windows Sensor; recommended for security tool exclusions