CB-29095: BSOD in SchannelCNG when "extra buffers" are used
Root cause of issue has been identified to be with a portion of code related to the Sensor
Resolution
Issue to be addressed in the 6.2.5 Windows Sensors Release, current ETA is Jan 2020.
Additional Information
Two available workarounds to issue:
Disable Tamper Detection on the policy, in the advanced Policy options within the CB Response console. This will disable the piece of code which creates and clears that buffer.
Temporarily roll back Sensors to version 6.2.2 , per following instructions: https://community.carbonblack.com/t5/Knowledge-Base/CB-Response-How-to-Downgrade-a-Sensor/ta-p/69734