Forum Discussion
MarcVDH
Oct 14, 2024Iron Contributor
SenseNdr.exe is slowly eating the memory
Hello, For a few days now, we have some Windows Server 2019 physical machines where almot all the memory is commited to sensendr.exe. If you terminate sensendr.exe, the process comes back after...
actenherkel
Oct 18, 2024Copper Contributor
MarcVDH
I just want to report that we are experiencing the same problem.
Windows Defender SenseNdr.exe causing Non-Paged Pool memory leak after - Microsoft Community
NP pool mem should be around 14K. Memory leak is even faster on the DC.
MarcVDH
Oct 18, 2024Iron Contributor
Good news !
We have an open case for this with Microsoft and we just received a mail saying they have found the root cause. The memory becomes full of captured packets (by pktmon) because sensendr is not able to process them as quickly as they arrive.
They have developed a long-term solution that, as they said, will automatically manage and release memory before it reaches a critical level of impact.
I don't have any more info about how this solution will be distributed.
- MarcVDHOct 18, 2024Iron ContributorI got another mail from MS; apparently the fix is included in the October 2024 CU.
I am trying to have the permissions to patch a few servers on our side to test this now.
If someone else can test this also.