Forum Discussion
MarcVDH
Oct 14, 2024Iron Contributor
SenseNdr.exe is slowly eating the memory
Hello, For a few days now, we have some Windows Server 2019 physical machines where almot all the memory is commited to sensendr.exe. If you terminate sensendr.exe, the process comes back after...
keithnicholas
Oct 24, 2024Copper Contributor
seemed to kill one of our machines the other day. Our applications started failing and we couldn't RDP. One of our webservers it started having an impact.
Killing the process seems to release all the memory. I'm wondering if there is any consequence to killing SenseNdr.exe every 24 hours till it's patched.
MarcVDH
Oct 25, 2024Iron Contributor
The consequence I see is that you might miss alerts in case of supect network activity as the packets won't be analyzed.
The good thing is the process being re-launched automatically after being killed.
In our company I have deployed a GPO with a scheduled task to kill it regularily. It is certainly not the nicest solution but it does the job until a valid solution is found.
The good thing is the process being re-launched automatically after being killed.
In our company I have deployed a GPO with a scheduled task to kill it regularily. It is certainly not the nicest solution but it does the job until a valid solution is found.