IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

App Control: What are the Effects of the Agent_Config DelayMsBetweenImageEnumeration

App Control: What are the Effects of the Agent_Config DelayMsBetweenImageEnumeration

Environment

  • App Control Agent: All Supported Versions
  • Microsoft Windows: All Supported Versions

Question

What does the Agent Config DelayMsBetweenImageEnumeration do?

Answer

The Agent will periodically enumerate all running processes, and validate that they are Approved to run. This property controls the time between these enumerations. Setting this to 0 is not recommended, as it will disable the operation and reduce the Security Posture of the Agent.

Additional Notes

  • Setting this value to 0 can decrease memory and CPU consumption when a large number of users are on the same system.
  • This setting will not increase hashing time for files, and shouldn't affect .TMP files.
  • Setting this value to 0 will reduce security, as the agent will not check running processes.

Labels (1)
Tags (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎08-20-2020
Views:
435