CB Response: Sensor adds line breaks to Windows OS hosts file

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Extra line breaks are added to the Windows OS hosts file

Environment

• CB Response Sensor: 6.2.3 and 6.2.4
• Microsoft Windows OS: All Versions
• Windows OS hosts file (C:\Windows\System32\Drivers\etc\hosts)

Cause

Hosts file is modified by the CB Response sensor when certificate swapping is in use

Resolution

Issue is resolved in 6.2.5-win sensor version.