Windows hosts file corrupted by EDR sensor
search cancel

Windows hosts file corrupted by EDR sensor

book

Article ID: 398003

calendar_today

Updated On:

Products

Carbon Black EDR

Issue/Introduction

Windows hosts file corrupted by EDR sensor with error

Environment

  • EDR Server: 7.8.0 and newer
  • Windows OS: All Supported Versions

Cause

The EDR sensor corrupts the hosts file when two conditions are met:

  1. A third-party software locks the hosts file.
  2. A network-level change occurs (e.g., connecting to WiFi, IP address modification, etc.).

Resolution

Please open a ticket with Broadcom support

Powered by Wolken Software