CB Response: 6.2.2 Mac Sensor High CPU and Memory usage

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

High CPU and Memory Usage

Environment

• Carbon Black Response Sensor: 6.2.2 and above
• Apple MacOS: All Supported Versions

Cause

Increase in modloads on endpoint, usually caused by another scanning program

Resolution

1. Open the CB Response Console
2. Go to the sensors page
3. Open the sensor group details for the affected sensors
4. Open the Advanced tab
5. Select "Filter known modloads"