EDR: Why Sensor Health Status is Low During Startup in Windows 10 OS?

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

After rebooting the endpoint, the sensor health status will change to Excessive Event Loss/ High Event Loss/ Elevated event loss in console.

Environment

• EDR Sensor: All Supported Versions
• Microsoft Windows 10 v2004 and higher

Cause

This is a known issue that is being investigated by engineering.

Resolution

• This issue will be fixed in the next sensor release 7.2.1
• This article will be updated once the sensor is available