Windows Sensor Crash Due to CbEDRAMSI.dll
book
Article ID: 385176
calendar_today
Updated On:
Products
Carbon Black Hosted EDR (formerly Cb Response Cloud)
Carbon Black EDR (formerly Cb Response)
Issue/Introduction
Windows blue screen due to CbEDRAMSI.dll
Environment
- EDR Windows Sensor: 7.4.1
Cause
This is a known issue being tracked via CB-44052 caused by an unsigned binary when the SharePoint 2023 AMSI integration is enabled
Resolution
This will be resolved in the next version of the Windows Sensor 7.5.0
Feedback
thumb_up
Yes
thumb_down
No