Carbon Black alongside Microsoft Defender for Endpoint (formerly Advanced Threat Protection or ATP)

Issue

Concurrently running the Microsoft Defender for Endpoint sensor on the same computers that have the Carbon Black sensor.

Environment

Microsoft Defender for Endpoint (formerly ATP)

Resolution

Microsoft and Red Canary do not recommend running Carbon Black and Microsoft Defender for Endpoint on the same computer at the same time.  Doing so has been observed to randomly cause significant telemetry delay being sent to Red Canary.