Access official resources from Carbon Black experts
This solution applies to all Carbon Black OSX Sensor versions
On OSX hosts, performance issues may be observed such as high CPU utilization, memory consumption, disk usage or erratic mouse behavior.
The CPU, memory, or disk issue can be found from OSX's Activity Monitor application.
To resolve the issue, disable "Binary module (.dll, .sys, .exe) loads" event from the Sensor Group Settings from the Carbon Black UI:
1. Navigate to Administration -> Sensors -> select the relevant Sensor Group -> select "Edit Settings"
2. Select the "Event Collection" tab, and deselect the check box "Binary module (.dll, .sys, .exe) loads".
3. Select Save Changes
4. Allow a few minutes for the Sensor to receive the update
5. Ensure the performance symptom is no longer observed.
By disabling this event you will lose visibility of dynamic libraries that are loaded on the endpoint.
This issue is addressed in Sensor version v5.1.