Product guide

Table 8-1 CLI commands for managing the disks
Command Description
copyto backup Copies the software version on the active disk to the backup disk. For example, if you
find the current active software version to be stable, you can back it up to the backup
disk.
This command works only if the Appliance had been booted from the active disk.
copyto active Copies the software version from the backup disk to the active disk. However, you
must restart the McAfee Advanced Threat Defense Appliance for it to load this new
image from the active disk.
This command works only if the Appliance had been booted from the backup disk.
reboot backup Reboots the Appliance with the software version on the backup disk.
reboot active Reboots the Appliance with the software version on the active disk.
List of CLI commands
This section lists McAfee Advanced Threat Defense CLI commands in the alphabetical order.
Blacklist
Use the following commands to manage the blacklist of McAfee Advanced Threat Defense.
Syntax:
• To add an MD5 to the blacklist, use blacklist add <md5> <score> <file_name> <malware_name>
<Eng-ID> <OS-ID>
Parameter Description
<md5> The MD5 hash value of a malware that you want to add to the blacklist.
<score> The malware severity score. A valid value is from 3 to 5.
<file_name> The file name for the MD5.
<malware_name> The malware name for the MD5.
<Eng-ID> The numerical ID for the corresponding engine.
<OS-ID> The numerical ID of the operating system that was used to dynamically
analyze the malware.
Example: blacklist add 254A40A56A6E28636E1465AF7C42B71F 3 ExampleFileName
ExampleMalwareName 3 3
• To delete an MD5 from the blacklist, use blacklist delete <md5>
Parameter Description
<md5> The MD5 hash value of a malware that you want to delete from the blacklist.
Example: blacklist delete 254A40A56A6E28636E1465AF7C42B71F
8
CLI commands for McAfee Advanced Threat Defense
List of CLI commands
126
McAfee Advanced Threat Defense 3.0.4 Product Guide