This page is an aggregate of all OER topics onto a single page for more convenient HTML viewing.
Windows Hardware Recommendations
Endpoints should comply with all hardware requirements for the OS you are running. Consider all processes that run on the endpoints when determining hardware configuration. Only industry standard desktop, laptop, or notebook computers and server hardware platforms are supported. Mobile and tablet require additional qualifications. Please contact VMware Carbon Black Support for additional information.
| Metric | Endpoint Standard | Endpoint Standard + Audit & Remediation | Endpoint Standard + Enterprise EDR | Endpoint Standard + Enterprise EDR + Audit & Remediation |
|---|---|---|---|---|
| CPU | Minimum: 1.5 GHz Recommended: 2 GHz |
Minimum: 1.8 GHz Recommended: 2 GHz |
Minimum: 1.8 GHz Recommended: 2 GHz |
Minimum: 1.8 GHz Recommended: 2 GHz |
| Memory | 1 GB 2 GB for Windows 10/2016+ |
1 GB 2 GB for Windows 10/2016+ |
1 GB 2 GB for Windows 10/2016+ |
1 GB 2 GB for Windows 10/2016+ |
| Cores | 2 | 2 | 2 | 2 |
| Network required | Minimum: 100 Mbit Recommended: 1 Gbit |
Minimum: 100 Mbit Recommended: 1 Gbit |
Minimum: 100 Mbit Recommended: 1 Gbit |
Minimum: 100 Mbit Recommended: 1 Gbit |
| Minimum network during light usage | 1k bytes/sec read/writes each | 1k bytes/sec read/writes each | 1k bytes/sec read/writes each | 1k bytes/sec read/writes each |
| *Free disk space | Minimum: 200 MB Recommended: 1 GB |
Minimum: 200 MB Recommended: 1 GB |
Minimum: 200 MB Recommended: 1 GB |
Minimum: 200 MB Recommended: 1 GB |
Note: The Windows sensor includes an optional local scanning feature that enables static file analysis of applications before they are executed. This feature requires an additional 600MB of disk storage to store signature information and allow for signature updates.
| Metric | Endpoint Standard + Audit & Remediation | Endpoint Standard + Enterprise EDR + Audit & Remediation |
|---|---|---|
| CPU | Minimum: 1.8 GHzRecommended: 2 GHz32-bit is not supported | Minimum: 1.8 GHzRecommended: 2 GHz32-bit is not supported |
| Memory | 1 GB2 GB for Windows 10/2016+ | 1 GB2 GB for Windows 10/2016+ |
| Cores | 2 | 2 |
| Network required | Minimum: 100 MbitRecommended: 1 Gbit | Minimum: 100 MbitRecommended: 1 Gbit |
| Minimum network during light usage | 1k bytes/sec read/writes each | 1k bytes/sec read/writes each |
| Free disk space | Minimum: 100 MBRecommended: 500 MB | Minimum: 100 MBRecommended: 500MB |
| Metric | Enterprise EDR + Endpoint Standard | Enterprise EDR + Endpoint Standard + Audit & Remediation |
|---|---|---|
| CPU | Minimum: 1.8 GHz Recommended: 2 GHz | Minimum: 1.8 GHz Recommended: 2 GHz |
| Memory | 1 GB2 GB for Windows 10/2016+ | 1 GB2 GB for Windows 10/2016+ |
| Cores | 2 | 2 |
| Network required | Minimum: 100 Mbit Recommended: 1 Gbit | Minimum: 100 Mbit Recommended: 1 Gbit |
| Minimum network during light usage | 1k bytes/sec read/writes each | 1k bytes/sec read/writes each |
| Free disk space | Minimum: 100 MB Recommended: 500 MB | Minimum: 100 MB Recommended: 500 MB |
| Metric | Prevention |
|---|---|
| CPU | Minimum: 1.5 GHz Recommended: 2 GHz |
| Memory | 1 GB 2 GB for Windows 10/2016+ |
| Cores | 2 |
| Network required | Minimum: 100 Mbit Recommended: 1 Gbit |
| Minimum network during light usage | 1k bytes/sec read/writes each |
| *Free disk space | Minimum: 200 MB Recommended: 1 GB |
Note: The Windows sensor includes an optional local scanning feature that enables static file analysis of applications before they are executed. This feature requires an additional 600MB of disk storage to store signature information and allow for signature updates.
Windows Operating Systems and Respective Sensors
This topic describes Carbon Black Cloud Windows Sensors and operating systems for Windows Desktop.
Note: For users of Carbon Black Cloud on AWS GovCloud (US), see
Windows Operating Systems and Respective Sensors for AWS GovCloud (US) for system information specific to your environment.
Please see the Carbon Black Cloud Sensor Support Policy and the Windows Sensor Support Life Cycle Status page for information regarding Standard or Extended support for specific versions of the Windows Sensor.
Note: - indicates through and inclusive of; for example, 3.7-4.0 indicates 3.7.x through and inclusive of 4.0.x.
Important: Some sensor versions listed here may no longer be supported. Please consult the
Windows Sensor Support Life Cycle Status page for information on sensor life cycle support status.
| Operating System |
Architecture | OS Version |
Sensor Versions | |||||
|---|---|---|---|---|---|---|---|---|
| Endpoint Standard |
Audit and Remediation |
Enterprise EDR |
XDR | Workloads | Vulnerability Management |
|||
| Windows 11 23H2 | x64 | v23H2 | 3.9-4.0 | 3.9-4.0 | 3.9-4.0 | 3.9.1-4.0 | N/A | N/A |
| ARM64 | v23H2 | 3.9-4.0 | 3.9-4.0 | 3.9-4.0 | 3.9.1-4.0 | N/A | N/A | |
| Windows 11 22H2 | x64 | v22H2 | 3.8-4.0 | 3.8-4.0 | 3.8-4.0 | 3.9.1-4.0 | 3.8-4.0 | 3.8-4.0 |
| ARM64 | v22H2 | 3.9-4.0 | 3.9-4.0 | 3.9-4.0 | 3.9.1-4.0 | N/A | N/A | |
| Windows 11 21H2 | x64 | v21H2 | 3.7-4.0 | 3.7-4.0 | 3.7-4.0 | 3.9.1-4.0 | N/A | 3.7-4.0 |
| ARM64 | v21H2 | 3.9-4.0 | 3.9-4.0 | 3.9-4.0 | 3.9.1-4.0 | N/A | N/A | |
| Windows 10 22H2 | x86 | v22H2 | 3.8-4.0 | 3.8-4.0 | 3.8-4.0 | 3.9.1-4.0 | N/A | N/A |
| x64 | v22H2 | 3.8-4.0 | 3.8-4.0 | 3.8-4.0 | 3.9.1-4.0 | 3.8-4.0 | 3.8-4.0 | |
| Windows 10 21H2 | x86 | v21H2 | 3.7-4.0 | 3.7-4.0 | 3.7-4.0 | 3.9.1-4.0 | N/A | N/A |
| x64 | v21H2 | 3.7-4.0 | 3.7-4.0 | 3.7-4.0 | 3.9.1-4.0 | 3.7-4.0 | 3.7-4.0 | |
| Windows 10 21H1 | x86 | v21H1 | 3.6-4.0 | 3.6-4.0 | 3.6-4.0 | 3.9.1-4.0 | N/A | N/A |
| x64 | v21H1 | 3.6-4.0 | 3.6-4.0 | 3.6-4.0 | 3.9.1-4.0 | 3.6-4.0 | 3.6-4.0 | |
| Windows 10 20H2 | x86 | 3.5-4.0 | 3.5-4.0 | 3.5-4.0 | 3.9.1-4.0 | N/A | N/A | |
| x64 | 3.5-4.0 | 3.5-4.0 | 3.5-4.0 | 3.9.1-4.0 | 3.6-4.0 | 3.6-4.0 | ||
| Windows 10 20H1 | x86 | v2004 | 3.5-4.0 | 3.5-4.0 | 3.5-4.0 | 3.9.1-4.0 | N/A | N/A |
| x64 | v2004 | 3.5-4.0 | 3.5-4.0 | 3.5-4.0 | 3.9.1-4.0 | 3.6-4.0 | 3.6-4.0 | |
| Windows 10 19H2 | x86 | v1909 | 3.4-4.0 | 3.4-4.0 | 3.4-4.0 | 3.9.1-4.0 | N/A | N/A |
| x64 | v1909 | 3.4-4.0 | 3.4-4.0 | 3.4-4.0 | 3.9.1-4.0 | 3.6-4.0 | 3.6-4.0 | |
| Windows 10 19H1 | x86 | v1903 | 3.4-4.0 | 3.4-4.0 | 3.4-4.0 | 3.9.1-4.0 | N/A | N/A |
| x64 | v1903 | 3.4-4.0 | 3.4-4.0 | 3.4-4.0 | 3.9.1-4.0 | 3.6-4.0 | 3.6-4.0 | |
| Windows 10 October 2018 Update | x86 | v1809 | 2.1.0-4.0 | 3.3-4.0 | 3.4-4.0 | 3.9.1-4.0 | N/A | N/A |
| x64 | v1809 | 2.1.0-4.0 | 3.3-4.0 | 3.4-4.0 | 3.9.1-4.0 | 3.6-4.0 | 3.6-4.0 | |
| Windows 10 April 2018 Update | x86 | v1803 | 2.1.0-4.0 | 3.3-4.0 | 3.4-4.0 | 3.9.1-4.0 | N/A | N/A |
| x64 | v1803 | 2.1.0-4.0 | 3.3-4.0 | 3.4-4.0 | 3.9.1-4.0 | 3.6-4.0 | 3.6-4.0 | |
| Windows 10 Fall Creators Update | x64 | v1709 | 2.1.0-4.0 | 3.3-4.0 | 3.4-4.0 | 3.9.1-4.0 | 3.6-4.0 | 3.6-4.0 |
| x86 | v1709 | 2.1.0-4.0 | N/A | 3.4-4.0 | 3.9.1-4.0 | N/A | N/A | |
| Windows 10 Creators Update | x64 | v1703 | 2.1.0-4.0 | 3.3-4.0 | 3.4-4.0 | 3.9.1-4.0 | 3.6-4.0 | 3.6-4.0 |
| x86 | v1703 | 2.1.0-4.0 | N/A | 3.4-4.0 | 3.9.1-4.0 | N/A | N/A | |
| Windows 10 Anniversary Update | x64 | v1607 | 2.1.0-4.0 | 3.3-4.0 | 3.4-4.0 | 3.9.1-4.0 | 3.6-4.0 | 3.6-4.0 |
| Windows 10 | x64 | v1507, v1511 | 2.1.0-4.0 | 3.3-4.0 | 3.4-4.0 | 3.9.1-4.0 | 3.6-4.0 | 3.6-4.0 |
| Windows 8.1 | x86 | SP0, Update 1, Update 2 |
2.1.0-4.0 | 3.3-4.0 | 3.4-4.0 | 3.9.1-4.0 | N/A | N/A |
| x64 | SP0, Update 1, Update 2 |
2.1.0-4.0 | 3.3-4.0 | 3.4-4.0 | 3.9.1-4.0 | 3.6-4.0 | N/A | |
| Windows 7(KB4474419 patch applied) | x86 | SP1 | 2.1.0-4.0 | 3.3-4.0 | 3.4-4.0 | 3.9.1-4.0 | N/A | N/A |
| x64 | SP1 | 2.1.0-4.0 | 3.3-4.0 | 3.4-4.0 | 3.9.1-4.0 | 3.6-4.0 | 3.6-4.0 | |
Note:
- Please note that Windows 10 19H1 support currently requires a workaround, which is documented here: https://community.carbonblack.com/t5/CB-Predictive-Security-Cloud/Update-Compatibility-with-the-Upco...
- For each supported operating system, Carbon Black also supports the Windows LTSC release branch for the listed sensor version.
- Carbon Black does not support x86 architecture (Windows 32-bit) for Live Query in any sensor version because osquery does not support it.
Important: The operating systems listed in the following table are no longer considered supported because there are no supported sensors validated to work with them.
| Operating System |
Architecture | OS Version |
Sensor Versions | |||||
|---|---|---|---|---|---|---|---|---|
| Endpoint Standard |
Audit and Remediation |
Enterprise EDR |
XDR | Workloads | Vulnerability Management |
|||
| Windows 8 | x86 | SP0 | 3.6.0 - 3.7.0.1503 | 3.3-3.7.0.1503 | 3.4-3.7.0.1503 | N/A | N/A | N/A |
| x64 | SP0 | 2.1.0 - 3.7.0.1503 | 3.3-3.7.0.1503 | 3.4-3.7.0.1503 | N/A | 3.6- 3.7.0.1503 | N/A | |
| Windows Vista | x86, x64 | SP2 | 2.1-3.2.1 | N/A | N/A | N/A | N/A | N/A |
Windows Operating Systems and Respective Sensors for AWS GovCloud (US)
The following is a list of Carbon Black Cloud Windows sensors for Windows Desktop. This list is specific to Carbon Black Cloud on AWS GovCloud (US).
Please see the Carbon Black Cloud Sensor Support Policy and the Windows Sensor Support Life Cycle Status page for information regarding Standard or Extended support for specific versions of the Windows Sensor.
Note: - indicates through and inclusive of; for example, 3.8-4.0 indicates 3.8.x through and inclusive of 4.0.x.
Important: Some sensor versions listed here may no longer be supported. Please consult the
Windows Sensor Support Life Cycle Status page for information on sensor life cycle support status.
| Operating System |
Architecture | OS Version |
Sensor Versions | |||
|---|---|---|---|---|---|---|
| Endpoint Standard |
Audit and Remediation |
Enterprise EDR |
Workloads | |||
| Windows 10 21H2 | x86 | v21H2 | 3.8-4.0 | 3.8-4.0 | 3.8-4.0 | N/A |
| x64 | v21H2 | 3.8-4.0 | 3.8-4.0 | 3.8-4.0 | 3.8-4.0 | |
| Windows 10 21H1 | x86 | v21H1 | 3.8-4.0 | 3.8-4.0 | 3.8-4.0 | N/A |
| x64 | v21H1 | 3.8-4.0 | 3.8-4.0 | 3.8-4.0 | 3.8-4.0 | |
| Windows 10 20H2 | x86 | 3.8-4.0 | 3.8-4.0 | 3.8-4.0 | N/A | |
| x64 | 3.8-4.0 | 3.8-4.0 | 3.8-4.0 | 3.8 | ||
| Windows 10 20H1 | x86 | v2004 | 3.8-4.0 | 3.8-4.0 | 3.8-4.0 | N/A |
| x64 | v2004 | 3.8-4.0 | 3.8-4.0 | 3.8-4.0 | 3.8 | |
| Windows 10 19H2 | x86 | v1909 | 3.8-4.0 | 3.8-4.0 | 3.8-4.0 | N/A |
| x64 | v1909 | 3.8-4.0 | 3.8-4.0 | 3.8-4.0 | 3.8-4.0 | |
| Windows 10 19H1 | x86 | v1903 | 3.8-4.0 | 3.8-4.0 | 3.8-4.0 | N/A |
| x64 | v1903 | 3.8-4.0 | 3.8-4.0 | 3.8-4.0 | 3.8-4.0 | |
| Windows 10 October 2018 Update | x86 | v1809 | 3.8-4.0 | 3.8-4.0 | 3.8-4.0 | N/A |
| x64 | v1809 | 3.8-4.0 | 3.8-4.0 | 3.8-4.0 | 3.8-4.0 | |
| Windows 10 April 2018 Update | x86 | v1803 | 3.8-4.0 | 3.8-4.0 | 3.8-4.0 | N/A |
| x64 | v1803 | 3.8-4.0 | 3.8-4.0 | 3.8-4.0 | 3.8-4.0 | |
| Windows 10 Fall Creators Update | x64 | v1709 | 3.8-4.0 | 3.8-4.0 | 3.8-4.0 | 3.8-4.0 |
| x86 | v1709 | 3.8-4.0 | 3.8-4.0 | 3.8-4.0 | N/A | |
| Windows 10 Creators Update | x64 | v1703 | 3.8-4.0 | 3.8-4.0 | 3.8-4.0 | 3.8-4.0 |
| x86 | v1703 | 3.8-4.0 | 3.8-4.0 | 3.8-4.0 | N/A | |
| Windows 10 Anniversary Update | x64 | v1607 | 3.8-4.0 | 3.8-4.0 | 3.8-4.0 | 3.8-4.0 |
| Windows 10 | x64 | v1507, v1511 | 3.8-4.0 | 3.8-4.0 | 3.8-4.0 | 3.8-4.0 |
Note:
- Please note that Windows 10 19H1 support currently requires a workaround, which is documented here: https://community.carbonblack.com/t5/CB-Predictive-Security-Cloud/Update-Compatibility-with-the-Upco...
- For each supported operating system, Carbon Black also supports the Windows LTSC release branch for the listed sensor version.
- Carbon Black does not support x86 architecture (Windows 32-bit) for Live Query in any sensor version because osquery does not support it.
Windows Sensor Support for osquery in Audit and Remediation
The following table shows which Carbon Black Cloud sensor versions support which versions of osquery for Audit and Remediation - Live Query.
| Windows Sensor Version | osquery Version |
|---|---|
| 4.0.0.1292 | 5.9.1 |
| 3.9.2.2698 | 5.5.1 |
| 3.9.1.2691 | 5.5.1 |
| 3.9.1.2464 | 5.5.1 |
| 3.9.0.2357 | 5.5.1 |
| 3.8.0.722 | 5.2.3 |
| 3.8.0.684 | 5.2.3 |
| 3.8.0.627 | 5.2.3 |
| 3.8.0.535 | 4.8.0 |
| 3.8.0.398 | 4.8.0 |
| 3.7.0.1503 | 4.8.0 |
| 3.7.0.1411 | 4.7.0 |
| 3.7.0.1253 | 4.5.0 |
| 3.6.0.2076+ | 4.5.0 |
| 3.6.0.1719+ | 4.4.0 |
| 3.5.0.1627+ | 4.1.2 |
| 3.4.0.1016+ | 3.3.2 |
| 3.3.0.984 | 3.2.6 |
Note: Carbon Black does not support x86 architecture (Windows 32-bit) for Live Query in any sensor version because osquery does not support it.
Windows Sensor Support Life Cycle Status
Use the following tables to determine the product life cycle stage of your Carbon Black Cloud Windows Sensor.
The Carbon Black Cloud Product Release Life Cycle policy is located at VMware Carbon Black Cloud Support Policy.
| Release | Enter Standard | Enter Extended | Enter End of Support |
|---|---|---|---|
| 4.0 | November 2023 | ||
| 3.9 | January 2023 | May 2024 | November 2024 |
| Release | Enter Standard | Enter Extended | Enter End of Support |
|---|---|---|---|
| Release | Enter Standard | Enter Extended | Enter End of Support |
|---|---|---|---|
| 3.8 | January 2022 | July 2023 | January 2024 |
| 3.7 | June 2021 | July 2022 | January 2023 |
| 3.6 | September 2020 | January 2022 | July 2022 |
| 3.5 | February 2020 | August 2020 | February 2021 |
| 3.4 | June 2019 | February 2020 | June 2020 |
| 3.3 | December 2018 | June 2019 | December 2019 |
| 3.2.1 | August 2018 | December 2018 | June 2019 |
| 3.2.0 | May 2018 | August 2018 | February 2019 |
| 3.1.0.150 | January 2018 | May 2018 | November 2019 |
| 3.0.1 | September 2017 | January 2018 | July 2018 |
| 2.1.0.11 | August 2017 | September 2018 | March 2019 |
| 2.1.0.9 | July 2017 | August 2018 | February 2019 |
| 2.1.0.8 | July 2017 | July 2017 | September 2017 |
| 2.0.4 | May 2017 | July 2017 | September 2017 |
| 2.0.3 | March 2017 | May 2017 | September 2017 |
| 2.02 | January 2017 | March 2017 | September 2017 |
| 2.0.1.8 | December 2016 | January 2017 | September 2017 |
| 1.0.7 | January 2017 | March 2017 | September 2017 |
| 1.0.6 | August 2016 | January 2017 | September 2017 |
