Carbon Black Cloud: Delays Observed while copying files to shares

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

• Copying files to a shared resource takes significantly longer than usual
• Custom bypass rules do not seem to resolve the issue
• When sensor is in bypass mode, on both source/target machines, copying shows no delays
• Issue presents itself while copying to/from SMB resources with Robocopy, Powershell, etc.

Environment

• Endpoint Standard Sensor: 3.4.x - 3.5.x
• Carbon Black Cloud: November '19 Release

Cause

Known issue (DSEN-6899/DSEN-8361)

Resolution

Upgrade to sensor version 3.6.x or higher