Does anyone else here deploy Carbon Black? I've dealt with them for years and I've got nothing but kernel panics from their software. My fleet currently runs Cb Protection (bit9) version 18.104.22.168 and Cb Response version 22.214.171.124912. I've attempted to work with their support team on many occasions but they can never give me a clear solution. Has anyone ever gotten these kernel panics to stop?
We used CB in the past and had Kernal Panics as well. It was usually the version of CB being incompatible with the OS release. Since Carbon Black never wants to have zero day support we were unable to continue using them in our bleeding edge environment. Besides the obvious, checking your Privacy Preferences Policy Control and Kernal Extension Config Profiles. My advice would be to check the logs of what caused the KP and verify the compatibility of the sensor deployed to said Mac. Also check with your cyber team, they may have access to see what caused it as well.