After installing the Mac Endpoint Agent, users can run several commands from Terminal on macOS, including syncing with Nebula and checking for software and protection updates. This article lists the available commands for Mac endpoints.
To run a command:
- Open Terminal on the Mac endpoint.
-
Change the working directory to the location of the EndpointAgentDaemon:
cd '/Library/Application Support/Malwarebytes/Malwarebytes Endpoint Agent/EndpointAgentDaemon.app/Contents/MacOS/'
-
Run a command with sudo, using the table below for available commands:
sudo ./EndpointAgentDaemon <command>
Note: Terminal commands are case-sensitive.
| Command | Description |
|---|---|
| settings | Displays a compact summary of current agent settings. |
| versions | Displays versions of the installed Endpoint Agent and its components. See Endpoint Agent system components for more information. |
| syncnow | Forces a sync with Nebula to check for new policy settings and tasks. |
| testconnections | Runs connectivity tests. |
| updateprotection | Manually retrieves the latest protection rules from Nebula and updates the protection service. |
| updatesoftware | Manually checks for and installs ThreatDown software updates. |
| accounttoken=<token> |
Changes the account token and forces the endpoint to register as a new endpoint in the Default Group for a different Nebula account. See Move an endpoint between Nebula accounts or OneView sites for more details. Administrative privileges required. Note: After setting the account token, restart the EA service using the command below. |
| launchctl stop com.malwarebytes.agent.daemon | Restarts the Endpoint Agent. |
| loglevel=VALUE | The level of logging captured by the Endpoint Agent. Valid values are Debug and Info. |