Endpoint Standard: Temp files getting created after using MS office applications

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

• After accesing  an MS Office document, random .tmp files are created and left behind at the same location.
• For Example : If an MS office file is accessed  from desktop, multiple temp files are left behind on desktop.

Environment

• Endpoint Standard Sensor: 3.6.0.1941
• Microsoft Office Applications

Cause

The cause of the issue is unknown 

Resolution

If facing this issue , open a case with Carbon Black Support and provide the following information:

• Verify if the issue is reproduced when sensor is placed in bypass mode .
• Collect process monitor logs when are application is being accessed or when temp files are being created and note the timestamp of the issue.