CB ThreatHunter: ThreatHunter Only Sensor Install Disables Windows Defender's 'Real Time' Protection
search cancel

CB ThreatHunter: ThreatHunter Only Sensor Install Disables Windows Defender's 'Real Time' Protection

book

Article ID: 285158

calendar_today

Updated On:

Products

Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

CB ThreatHunter standalone installation continues to interact with Windows WSC and ends up disabling Windows Defender's 'Real Time' protection and any third-party AV.

Environment

  • CB Defense Sensor: 3.4.0.851
  • Windows OS: Windows 10 x64 19h1 build 18342

Cause

The sensor option on the back-end for ‘Use Windows Security Center’ as well as a number of other sensor options are now removed from the CB ThreatHunter only back-end UI.

Resolution

As of August 20th, 2019 a fix was released and applied to the newest backend version, 0.48.4. It was pushed to all backends exhibiting this issue.

Additional Information

If the issue still persists please submit a case to Carbon Black Technical Support.