CB Response: Check Point Media Encryption Disk Driver is Failing

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Initial use of external drive will be recognized, when drive is ejected then used again the Check Point Virtual Drive is not being detected.

Environment

• CB Response Windows Sensor: 6.1.7 and Below
• Check Point Media Encryption Disk 

Cause

CB-21913 - USB device cannot load driver due to a previous instance of the driver being loaded in memory.

Resolution

Addressed in the v6.1.9 Windows Sensor Release.