Carbon Black Cloud: Memory Leak in Mac Sensor 3.6.1.10

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

• Memory Leak in Mac Sensor 3.6.1.10
• Downgrading to 3.5.3.82 does not resolve the issue

Environment

• Carbon Black Cloud MacOS Sensor: 3.5.1 and Higher
• Apple MacOS: 11/Big Sur and later

Resolution

Enabling Full Disk Access resolves this issue. 

Additional Information

• Carbon Black recommends granting the Sensor Full Disk Access on all macOS machines running 10.14.5 and higher
• Full Disk Access is not required for the Sensor to function, but it is required for the Sensor to be fully effective.