

VMware has provided a script that will capture the necessary data sets for investigating potential interoperability issues. Source: Collect a Procmon for Sensor Performance Resolution for a Low Altitude Procmon Capture Zip the PML file before sending to reduce the size.PML, then when prompted, select "All Events" and "OK". After reproduction, stop the capture (Ctrl+E).Start the capture (Ctrl+E) when ready to reproduce.Go to Filter and uncheck the filtering "Process Name is System".

Go to Options > Profiling Events > Generate Thread Profiling every second.Open Procmon and Press Ctrl+E to stop the capture.Unzip and place Procmon in an easy to find location.Download the latest Process Monitor (Procmon) from sysinternals.Microsoft Windows: All supported versions Resolution for a Procmon for Sensor Performance When running a procmon capture, confirm the altitude did not revert by running fltmc in cmd ran as administrator.User suspects that there are interoperability issues between the VMware Carbon Black Cloud sensor and another program installed on an endpoint.Click Apply for both "Advanced Security Settings for Process Monitor 23 Instance" and "Permissions for Process Monitor 23 Instance" to take affect.Open "Select Principle" and type "everyone".Under the Permissions tab, select "Add".To avoid resetting the change right click on the "Process Monitor 23 Instance" key and select Permissions.

