CB Response: High memory usage by Windows sensor 6.1.7

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Windows endpoints see a gradual increase of memory usage by the CB Response Sensor application.

Environment

• CB Response Server: 6.x and Higher
• CB Response Sensor: 6.1.7
• Windows OS

Cause

The elevated memory usage is caused by a known issue with the Windows Sensor 6.1.7. (CB-21640)
 

Resolution

Upgrade the affected Windows Sensor to version 6.1.8 or higher.

Additional Information

All versions of Windows are affected but it far more frequently affects Windows Servers (eg, Windows 2008, 2012)