CB ThreatHunter: CPU Performance Spiking When Upgraded from 3.3.0.984

Products

• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

• Upgraded sensor version from 3.3.0.984 to 3.4.0.820 and newer
• Enabled ThreatHunter Feature Flag
• CPU Spikes after upgrade

Environment

• CB ThreatHunter Console: All Versions
• CB ThreatHunter Sensor: 3.4.0.820
• Microsoft Windows: All Supported Versions

Cause

Carbon Black is still investigating the issue when upgrading from 3.3.0.984 to 3.4.0.820 and newer sensor versions after enabling CB ThreatHunter Feature flag.

Resolution

At this time we have found uninstalling and reinstalling 3.4.0.842 sensor resolves the issue. 

Additional Information

This was only noticed in the 3.4.0.820 sensor version and resolved with 3.4.0.842+ versions.