Carbon Black Cloud: "Attempted a Network Connection to a Scanning Host" After Upgrade to 3.9

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Seeing many "[process] attempted a network connection to a scanning host", after upgrade to the 3.9 Sensor.

Environment

• Carbon Black Cloud Sensor: 3.9.0 and Higher
• Microsoft Windows: All Supported Versions

Cause

The root cause is under investigation and resolved in the 3.9.2 Sensor release with the resolution of DSEN-23186.

Resolution

Upgrade to Sensor 3.9.2