EDR: Cannot delete executables from SMB with Windows sensor 7.0.x

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• Executable files opened from a file file share cannot be deleted
• File In Use dialogue pops up when attempting to delete the file
• The file may appear to delete successfully, but re-appears 

Environment

• EDR Sensor: 7.x (formerly CB Response)
• Microsoft Windows Server 2016
• Microsoft Windows 10

Cause

A defect has been identified in 7.0.0 and 7.0.1 sensors - CB-32117

Resolution

• Upgrade to 7.1.0-win sensor to correct this issue
  • https://community.carbonblack.com/t5/Knowledge-Base/EDR-What-Repo-Contains-a-Specific-Windows-Sensor-Version/ta-p/77179
• As a workaround, downgrade to a supported 6.x sensor version

Additional Information

Issue may also prevent users from opening files