Environment
- EDR Server: All Versions
- EDR Sensor: All Versions
Symptoms
- Tamper Alert Carbon Black Sensor Process has been Terminated or Shutdown
- Tamper Type AlertCoreDriverUnloaded
- Report link does not generate any actionable data
Cause
The core driver is not sending enough details to the service to send to the server
Resolution
This issue is being investigated by VMWare Carbon Black tracking number EA-21671
Additional Notes
