Reason for the .dmp file created in 'C:\Windows\CarbonBlack\CrashDumps' directory

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

 Why is there a .dmp file created in 'C:\Windows\CarbonBlack\CrashDumps' directory every time the OS is restarted?

Environment

• EDR Sensor: All Versions
• Microsoft Windows: All Supported Versions

Resolution

 The .dmp files in the 'C:\Windows\CarbonBlack\CrashDumps' directory are expected, and designed to collect debugging information when the OS is restarted. 

Additional Information

• The .dmp files in the 'C:\Windows\CarbonBlack\CrashDumps' directory can be removed if needed, file will be recreated on the next restart of the OS.