CB Response: High CPU during developer application build process with 6.x Windows sensor

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• Build processes use more CPU than before the sensor was installed, maxing out the system resources
• Build times increase because system resources are fully in use

Environment

• CB Response Server: All Versions
• CB Response Sensor: 6.1.9 and Higher
• Microsoft Windows OS: All Supported Versions
• Modload and/or Storefile collection is disabled in the Sensor Group settings

Cause

ModLoads and/or Store file uploads are disabled and hashes are unnecessarily recalculated for every single process and module load. 

Resolution

This has been identified as a defect and will be fixed in 6.2.4-win sensor verison.

Additional Information

Fixes will be tracked with the following defect ids: CB-27008 and CB-27009