CB Response: What Are The Mac Sensor Health Score Events?

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

What are the Mac sensor health score events and what is their impact on sensor health?
 

Environment

• CB Response: All Versions
• Mac OS: All Supported Versions

Resolution

 

Memory Usage

Memory (MB)	Health Score	Message
> 100	-10	Elevated memory usage
> 250	-20	High memory usage
> 512	-25	Very high memory usage
> 1024	-50	Excessive memory usage

 

Out of License

Condition	Health Score	Message
Expired License	-25	Out of License

 

 

Upgrade Issue

Condition	Health Score	Message
Upgrade Incomplete	-75	Endpoint must be restarted to complete upgrade
Upgrade Failed	-75	Cb Response kernel extensions are not approved for load

 

 

Proxy Driver Failure

Condition	Health Score	Message
Driver fails to load	-25	Proxy Driver Failure

 

 

Procmon Driver

Condition	Health Score	Message
Version does not match sensor version	-37	Procmon Driver version mismatch.
Driver fails to load	-37	Procmon Driver Failure

 

 

Netmon Driver

Condition	Health Score	Message
Version does not match sensor version	-37	Netmon Driver version mismatch.
Driver fails to load	-37	Netmon Driver Failure