Environment
- EDR: All versions
- Event Forwarder: 3.7.4 and below
Symptoms
When a sensor is isolated there are events sent with an empty type from the event forwarder
Cause
Isolated sensors send a NetconnBlock2 event that does not have a routing type
Resolution
Upgrade to cb-event-forwarder 3.7.5 or higher
#HostedEDR#EDR