Endpoint Security for Linux CLI Commands

Help & Information Commands

To show a list of all the help commands with their descriptions, run:

cpla --help

To show the help for available Anti-Malware commands, run:

cpla am --help

To show information about the product and the security modules installed (Anti-Malware, EDR) run:

cpla info

To show the information about the installed Anti-Malware module, run:

cpla am info

To show the help for available commands for the installed EDR module, run:

cpla bg --help

To show information about the installed EDR, run:

cpla edr info

To show the help for available Behavioral Guard commands, run:

cpla bg--help

To show information about the installed Behavioral Guard, run:

cpla bg info

Quarantine Commands

To see a list of all current quarantined files, run:

cpla am quarantine list

To add a file to quarantine, run:

sudo cpla am quarantine add <path_to_file>

To remove a file from quarantine, and restores the file to its original place, run:

sudo cpla am quarantine restore <path_to_file>

To show the help for available Anti-Malware quarantine commands, run:

cpla am quarantine --help

Scans & Detections

  1. To trigger a scan of files in the provided path by the Anti-Malware module:

    cpla am scan <path_to_scan>
  2. To show detections of Anti-Malware:

    cpla am detections
    Note:

    To limit the number of detections displayed, use the parameter --limit <number_of_detections>. Default is 100.

  3. To show the latest detections of Behavioral Guard:

    cpla bg detections
    Note:

    To limit the number of detections displayed, use the parameter --limit <number_of_detections>. Default is 100.

Logs

To collect the logs of the product:

  1. Run the following command:
    cpla collect-logs
    Note:

    When you use this command, it prepares a Zip file which you can send to the support manually.

Uninstall Endpoint Security for Linux

  1. To uninstall Endpoint Security from Linux, run.

    sudo ./ <install script name> uninstall
  2. To uninstall EDR only, run.

    sudo ./ <install script name> uninstall --product edr
  3. To uninstall BG only, run.

    sudo ./ <install script name> uninstall --product bg