Carbon Black Endpoint Standard - Error When Attempting to Open or Delete files from DFS Share When Sensor is Installed

Issue

Unable to open or delete files from DFS Share/Shared locations and getting the error "Could not find this item" when sensor is active.

When the issue occurs, the error "Could not find this item" appears, but after refreshing the desktop the file seems to disappear from that location.

Environment

Endpoint Standard Sensor Version: 3.6.0.1979
Microsoft Windows: All Supported Versions

Resolution

A fix for this issue will be released with sensor version 3.8. In the meantime, use this workaround:

The registry key DirectoryCacheLifetime (HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Lanmanworkstation\Parameters) has a default value of 10 seconds. Set this value to 0 to fix the issue.