This page is an aggregate of all OER topics onto a single page for more convenient HTML viewing.

Windows Hardware Recommendations

Endpoints should comply with all hardware requirements for the OS you are running. Consider all processes that run on the endpoints when determining hardware configuration. Only industry standard desktop, laptop, or notebook computers and server hardware platforms are supported. Mobile and tablet require additional qualifications. Please contact VMware Carbon Black Support for additional information.

Table 1. Product: Endpoint Standard on Windows
Metric Endpoint Standard Endpoint Standard + Audit & Remediation Endpoint Standard + Enterprise EDR Endpoint Standard + Enterprise EDR + Audit & Remediation
CPU

Minimum: 1.5 GHz

Recommended: 2 GHz

Minimum: 1.8 GHz

Recommended: 2 GHz

Minimum: 1.8 GHz

Recommended: 2 GHz

Minimum: 1.8 GHz

Recommended: 2 GHz

Memory

1 GB

2 GB for Windows 10/2016+

1 GB

2 GB for Windows 10/2016+

1 GB

2 GB for Windows 10/2016+

1 GB

2 GB for Windows 10/2016+

Cores 2 2 2 2
Network required

Minimum: 100 Mbit

Recommended: 1 Gbit

Minimum: 100 Mbit

Recommended: 1 Gbit

Minimum: 100 Mbit

Recommended: 1 Gbit

Minimum: 100 Mbit

Recommended: 1 Gbit

Minimum network during light usage 1k bytes/sec read/writes each 1k bytes/sec read/writes each 1k bytes/sec read/writes each 1k bytes/sec read/writes each
*Free disk space

Minimum: 200 MB

Recommended: 1 GB

Minimum: 200 MB

Recommended: 1 GB

Minimum: 200 MB

Recommended: 1 GB

Minimum: 200 MB

Recommended: 1 GB

Note: The Windows sensor includes an optional local scanning feature that enables static file analysis of applications before they are executed. This feature requires an additional 600MB of disk storage to store signature information and allow for signature updates.
Table 2. Product: Audit & Remediation on Windows
Metric Endpoint Standard + Audit & Remediation Endpoint Standard + Enterprise EDR + Audit & Remediation
CPU Minimum: 1.8 GHzRecommended: 2 GHz32-bit is not supported Minimum: 1.8 GHzRecommended: 2 GHz32-bit is not supported
Memory 1 GB2 GB for Windows 10/2016+ 1 GB2 GB for Windows 10/2016+
Cores 2 2
Network required Minimum: 100 MbitRecommended: 1 Gbit Minimum: 100 MbitRecommended: 1 Gbit
Minimum network during light usage 1k bytes/sec read/writes each 1k bytes/sec read/writes each
Free disk space Minimum: 100 MBRecommended: 500 MB Minimum: 100 MBRecommended: 500MB
Table 3. Product: Enterprise EDR on Windows
Metric Enterprise EDR + Endpoint Standard Enterprise EDR + Endpoint Standard + Audit & Remediation
CPU Minimum: 1.8 GHz Recommended: 2 GHz Minimum: 1.8 GHz Recommended: 2 GHz
Memory 1 GB2 GB for Windows 10/2016+ 1 GB2 GB for Windows 10/2016+
Cores 2 2
Network required Minimum: 100 Mbit Recommended: 1 Gbit Minimum: 100 Mbit Recommended: 1 Gbit
Minimum network during light usage 1k bytes/sec read/writes each 1k bytes/sec read/writes each
Free disk space Minimum: 100 MB Recommended: 500 MB Minimum: 100 MB Recommended: 500 MB
Table 4. Product: Prevention on Windows
Metric Prevention
CPU

Minimum: 1.5 GHz

Recommended: 2 GHz

Memory

1 GB

2 GB for Windows 10/2016+

Cores 2
Network required

Minimum: 100 Mbit

Recommended: 1 Gbit

Minimum network during light usage 1k bytes/sec read/writes each
*Free disk space

Minimum: 200 MB

Recommended: 1 GB

Note: The Windows sensor includes an optional local scanning feature that enables static file analysis of applications before they are executed. This feature requires an additional 600MB of disk storage to store signature information and allow for signature updates.

Windows Operating Systems and Respective Sensors

This topic describes Carbon Black Cloud Windows Sensors and operating systems for Windows Desktop.

Note: For users of Carbon Black Cloud on AWS GovCloud (US), see Windows Operating Systems and Respective Sensors for AWS GovCloud (US) for system information specific to your environment.

Please see the Carbon Black Cloud Sensor Support Policy and the Windows Sensor Support Life Cycle Status page for information regarding Standard or Extended support for specific versions of the Windows Sensor.

Note: - indicates through and inclusive of; for example, 3.7-4.0 indicates 3.7.x through and inclusive of 4.0.x.
Important: Some sensor versions listed here may no longer be supported. Please consult the Windows Sensor Support Life Cycle Status page for information on sensor life cycle support status.
Table 5. Supported Windows Operating Systems and Respective Sensors

Operating

System

Architecture

OS

Version

Sensor Versions

Endpoint Standard

Audit and Remediation

Enterprise EDR

XDR Workloads

Vulnerability Management

Windows 11 24H2 x64 v24H2 4.0.2 4.0.2 4.0.2 4.0.2 4.0.2 4.0.2
ARM64 v24H2 4.0.2 4.0.2 4.0.2 4.0.2 N/A N/A
Windows 11 23H2 x64 v23H2 3.9-4.0 3.9-4.0 3.9-4.0 3.9.1-4.0 3.9-4.0 3.9-4.0
ARM64 v23H2 3.9-4.0 3.9-4.0 3.9-4.0 3.9.1-4.0 N/A N/A
Windows 11 22H2 x64 v22H2 3.8-4.0 3.8-4.0 3.8-4.0 3.9.1-4.0 3.8-4.0 3.8-4.0
ARM64 v22H2 3.9-4.0 3.9-4.0 3.9-4.0 3.9.1-4.0 N/A N/A
Windows 11 21H2 x64 v21H2 3.7-4.0 3.7-4.0 3.7-4.0 3.9.1-4.0 N/A 3.7-4.0
ARM64 v21H2 3.9-4.0 3.9-4.0 3.9-4.0 3.9.1-4.0 N/A N/A
Windows 10 22H2 x86 v22H2 3.8-4.0 3.8-4.0 3.8-4.0 3.9.1-4.0 N/A N/A
x64 v22H2 3.8-4.0 3.8-4.0 3.8-4.0 3.9.1-4.0 3.8-4.0 3.8-4.0
Windows 10 21H2 x86 v21H2 3.7-4.0 3.7-4.0 3.7-4.0 3.9.1-4.0 N/A N/A
x64 v21H2 3.7-4.0 3.7-4.0 3.7-4.0 3.9.1-4.0 3.7-4.0 3.7-4.0
Windows 10 21H1 x86 v21H1 3.6-4.0 3.6-4.0 3.6-4.0 3.9.1-4.0 N/A N/A
x64 v21H1 3.6-4.0 3.6-4.0 3.6-4.0 3.9.1-4.0 3.6-4.0 3.6-4.0
Windows 10 20H2 x86 3.5-4.0 3.5-4.0 3.5-4.0 3.9.1-4.0 N/A N/A
x64 3.5-4.0 3.5-4.0 3.5-4.0 3.9.1-4.0 3.6-4.0 3.6-4.0
Windows 10 20H1 x86 v2004 3.5-4.0 3.5-4.0 3.5-4.0 3.9.1-4.0 N/A N/A
x64 v2004 3.5-4.0 3.5-4.0 3.5-4.0 3.9.1-4.0 3.6-4.0 3.6-4.0
Windows 10 19H2 x86 v1909 3.4-4.0 3.4-4.0 3.4-4.0 3.9.1-4.0 N/A N/A
x64 v1909 3.4-4.0 3.4-4.0 3.4-4.0 3.9.1-4.0 3.6-4.0 3.6-4.0
Windows 10 19H1 x86 v1903 3.4-4.0 3.4-4.0 3.4-4.0 3.9.1-4.0 N/A N/A
x64 v1903 3.4-4.0 3.4-4.0 3.4-4.0 3.9.1-4.0 3.6-4.0 3.6-4.0
Windows 10 October 2018 Update x86 v1809 2.1.0-4.0 3.3-4.0 3.4-4.0 3.9.1-4.0 N/A N/A
x64 v1809 2.1.0-4.0 3.3-4.0 3.4-4.0 3.9.1-4.0 3.6-4.0 3.6-4.0
Windows 10 April 2018 Update x86 v1803 2.1.0-4.0 3.3-4.0 3.4-4.0 3.9.1-4.0 N/A N/A
x64 v1803 2.1.0-4.0 3.3-4.0 3.4-4.0 3.9.1-4.0 3.6-4.0 3.6-4.0
Windows 10 Fall Creators Update x64 v1709 2.1.0-4.0 3.3-4.0 3.4-4.0 3.9.1-4.0 3.6-4.0 3.6-4.0
x86 v1709 2.1.0-4.0 N/A 3.4-4.0 3.9.1-4.0 N/A N/A
Windows 10 Creators Update x64 v1703 2.1.0-4.0 3.3-4.0 3.4-4.0 3.9.1-4.0 3.6-4.0 3.6-4.0
x86 v1703 2.1.0-4.0 N/A 3.4-4.0 3.9.1-4.0 N/A N/A
Windows 10 Anniversary Update x64 v1607 2.1.0-4.0 3.3-4.0 3.4-4.0 3.9.1-4.0 3.6-4.0 3.6-4.0
Windows 10 x64 v1507, v1511 2.1.0-4.0 3.3-4.0 3.4-4.0 3.9.1-4.0 3.6-4.0 3.6-4.0
Windows 8.1 x86

SP0, Update 1, Update 2

2.1.0-4.0 3.3-4.0 3.4-4.0 3.9.1-4.0 N/A N/A
x64

SP0, Update 1, Update 2

2.1.0-4.0 3.3-4.0 3.4-4.0 3.9.1-4.0 3.6-4.0 N/A
Windows 7(KB4474419 patch applied) x86 SP1 2.1.0-4.0 3.3-4.0 3.4-4.0 3.9.1-4.0 N/A N/A
x64 SP1 2.1.0-4.0 3.3-4.0 3.4-4.0 3.9.1-4.0 3.6-4.0 3.6-4.0
Note:
Important: The operating systems listed in the following table are no longer considered supported because there are no supported sensors validated to work with them.
Table 6. Unsupported Windows Operating Systems and Respective Sensors

Operating

System

Architecture

OS

Version

Sensor Versions

Endpoint

Standard

Audit and Remediation

Enterprise EDR

XDR Workloads

Vulnerability Management

Windows 8 x86 SP0 3.6.0 - 3.7.0.1503 3.3-3.7.0.1503 3.4-3.7.0.1503 N/A N/A N/A
x64 SP0 2.1.0 - 3.7.0.1503 3.3-3.7.0.1503 3.4-3.7.0.1503 N/A 3.6- 3.7.0.1503 N/A
Windows Vista x86, x64 SP2 2.1-3.2.1 N/A N/A N/A N/A N/A

Windows Operating Systems and Respective Sensors for AWS GovCloud (US)

The following is a list of Carbon Black Cloud Windows sensors for Windows Desktop. This list is specific to Carbon Black Cloud on AWS GovCloud (US).

Please see the Carbon Black Cloud Sensor Support Policy and the Windows Sensor Support Life Cycle Status page for information regarding Standard or Extended support for specific versions of the Windows Sensor.

Note: - indicates through and inclusive of; for example, 3.8-4.0 indicates 3.8.x through and inclusive of 4.0.x.
Important: Some sensor versions listed here may no longer be supported. Please consult the Windows Sensor Support Life Cycle Status page for information on sensor life cycle support status.
Table 7. Supported Windows Operating Systems and Respective Sensors

Operating

System

Architecture

OS

Version

Sensor Versions

Endpoint

Standard

Audit and Remediation

Enterprise EDR

Workloads
Windows 10 21H2 x86 v21H2 3.8-4.0 3.8-4.0 3.8-4.0 N/A
x64 v21H2 3.8-4.0 3.8-4.0 3.8-4.0 3.8-4.0
Windows 10 21H1 x86 v21H1 3.8-4.0 3.8-4.0 3.8-4.0 N/A
x64 v21H1 3.8-4.0 3.8-4.0 3.8-4.0 3.8-4.0
Windows 10 20H2 x86 3.8-4.0 3.8-4.0 3.8-4.0 N/A
x64 3.8-4.0 3.8-4.0 3.8-4.0 3.8
Windows 10 20H1 x86 v2004 3.8-4.0 3.8-4.0 3.8-4.0 N/A
x64 v2004 3.8-4.0 3.8-4.0 3.8-4.0 3.8
Windows 10 19H2 x86 v1909 3.8-4.0 3.8-4.0 3.8-4.0 N/A
x64 v1909 3.8-4.0 3.8-4.0 3.8-4.0 3.8-4.0
Windows 10 19H1 x86 v1903 3.8-4.0 3.8-4.0 3.8-4.0 N/A
x64 v1903 3.8-4.0 3.8-4.0 3.8-4.0 3.8-4.0
Windows 10 October 2018 Update x86 v1809 3.8-4.0 3.8-4.0 3.8-4.0 N/A
x64 v1809 3.8-4.0 3.8-4.0 3.8-4.0 3.8-4.0
Windows 10 April 2018 Update x86 v1803 3.8-4.0 3.8-4.0 3.8-4.0 N/A
x64 v1803 3.8-4.0 3.8-4.0 3.8-4.0 3.8-4.0
Windows 10 Fall Creators Update x64 v1709 3.8-4.0 3.8-4.0 3.8-4.0 3.8-4.0
x86 v1709 3.8-4.0 3.8-4.0 3.8-4.0 N/A
Windows 10 Creators Update x64 v1703 3.8-4.0 3.8-4.0 3.8-4.0 3.8-4.0
x86 v1703 3.8-4.0 3.8-4.0 3.8-4.0 N/A
Windows 10 Anniversary Update x64 v1607 3.8-4.0 3.8-4.0 3.8-4.0 3.8-4.0
Windows 10 x64 v1507, v1511 3.8-4.0 3.8-4.0 3.8-4.0 3.8-4.0
Note:

Windows Sensor Support for osquery in Audit and Remediation

The following table shows which Carbon Black Cloud sensor versions support which versions of osquery for Audit and Remediation - Live Query.

Windows Sensor Version osquery Version
4.0.2.1540 5.12.2.0
4.0.1.1428 5.11.0
4.0.0.1292 5.9.1
3.9.2.2698 5.5.1
3.9.1.2691 5.5.1
3.9.1.2464 5.5.1
3.9.0.2357 5.5.1
3.8.0.722 5.2.3
3.8.0.684 5.2.3
3.8.0.627 5.2.3
3.8.0.535 4.8.0
3.8.0.398 4.8.0
3.7.0.1503 4.8.0
3.7.0.1411 4.7.0
3.7.0.1253 4.5.0
3.6.0.2076+ 4.5.0
3.6.0.1719+ 4.4.0
3.5.0.1627+ 4.1.2
3.4.0.1016+ 3.3.2
3.3.0.984 3.2.6
Note: Carbon Black does not support x86 architecture (Windows 32-bit) for Live Query in any sensor version because osquery does not support it.

Windows Sensor Support Life Cycle Status

Use the following tables to determine the product life cycle stage of your Carbon Black Cloud Windows Sensor.

The Carbon Black Cloud Product Release Life Cycle policy is located at VMware Carbon Black Cloud Support Policy.

Table 8. Windows Sensors in Status: Standard Support
Release Enter Standard Enter Extended Enter End of Support
4.0 November 2023
3.9 January 2023 May 2024 November 2024
Table 9. Windows Sensors in Status: Extended Support
Release Enter Standard Enter Extended Enter End of Support
Table 10. Windows Sensors in Status: End of Support
Release Enter Standard Enter Extended Enter End of Support
3.8 January 2022 July 2023 January 2024
3.7 June 2021 July 2022 January 2023
3.6 September 2020 January 2022 July 2022
3.5 February 2020 August 2020 February 2021
3.4 June 2019 February 2020 June 2020
3.3 December 2018 June 2019 December 2019
3.2.1 August 2018 December 2018 June 2019
3.2.0 May 2018 August 2018 February 2019
3.1.0.150 January 2018 May 2018 November 2019
3.0.1 September 2017 January 2018 July 2018
2.1.0.11 August 2017 September 2018 March 2019
2.1.0.9 July 2017 August 2018 February 2019
2.1.0.8 July 2017 July 2017 September 2017
2.0.4 May 2017 July 2017 September 2017
2.0.3 March 2017 May 2017 September 2017
2.02 January 2017 March 2017 September 2017
2.0.1.8 December 2016 January 2017 September 2017
1.0.7 January 2017 March 2017 September 2017
1.0.6 August 2016 January 2017 September 2017