- These issues are addressed in Windows Sensor 7.3.2 (CB-39524)
- This issue has also been seen in Windows Sensor 7.4.0 and is resolved in 7.4.1 (CB-42042)
- If an upgrade is not possible, and you must remain on 7.3.2, then this Resolution can be followed instead.
- The file contention issue can be avoided by temporarily disabling the collection of certain events during the time of file contention (which can lead to the hang).
1. Prior to modifying Group Settings, note which Event Collections are currently being used.
2. After applying Windows updates and prior to restarting, in Sensor Group Settings, disable "Binary module loads", "Binaries" and "Binary info". Disabling these settings prevents the rehashing of the files, which will avoid the locking.
3. Reboot the endpoints as required by Windows.
4. Re-enable the settings back to the original settings and remember to save the Group Settings.