CB Response: Missing events on server 6.5.0 and 6.5.1

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• Some events are missing from processes
• A tamper event was logged on the process
• Alerts that run at ingress are generated but process has no event

Environment

• CB Response Server: 6.5.0, 6.5.1

Cause

Event data was being incorrectly discarded and not being ingested - CB-29153

Resolution

Upgrade to server version 6.5.2 or higher