Installing ThreatResponder on Linux (Debian based Distribution)

To install ThreatResponder on a Linux computer click on the Add Endpoint button displayed in the Dashboard and Endpoints sections.

A Download page will be displayed.

1. Click on the Linux icon

2. Download one of the debian or rpm distributions.

3. Extract the archive. The archive includes the agent and a .cfg file with the Company ID
4. From the terminal, run:

DEBIAN

sudo dpkg -i threatresponder.deb

REDHAT

sudo yum install threatresponder.rpm

OR, for newer distributions

sudo dnf install threatresponder.rpm

5. After running the installer, the following command must be run in order to provide your customer ID data:

sudo /usr/sbin/threatresponder-agent --config "<company id>"

You will find the <company id> in the CompanyID.cfg file in your ThreatResponder agent archive.