Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Mac Becomes Unresponsive When Logging In With Remote A/D User With Both Google Drive And EDR Sensor Installed On Endpoint

Mac Becomes Unresponsive When Logging In With Remote A/D User With Both Google Drive And EDR Sensor Installed On Endpoint

Environment

  • EDR Server: 7.4.1 and Higher
  • EDR Sensor 7.1.0
  • Apple macOS: 10.15.7 and Higher
  • Google Drive: version 48

Symptoms

Mac becomes unresponsive when logging in with remote A/D user with both Google Drive and EDR sensor installed on endpoint.

Cause

  • Possibly due to banning pausing execution of processes, especially if the sensor daemon is not running for some reason.
  • Sensor may be interfering with the remote mounted user directory due to CB-33763.

Resolution

  • Downgrade Google Drive app to version 47.
  • Access Google Drive via web browser.
  • Upgrade EDR Mac Sensor to version 7.1.1

Additional Notes

Users can login to Mac locally with normal boot, or remotely via safe mode.

Related Content


Labels (1)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎01-06-2022
Views:
228
Contributors