Problem performance blade forensics

[lluner]

Gentlemen,

I'm receiving complaints about slowness on some machines using the forensic blade, especially I/O, based on the information provided. How can I perform the analysis in this case?

Endpoint version: 88.72.2001

Procedures already performed

1. I ran the diagnostics several times and have already made the exclusions.
2. I created a specific policy for the machine in question, setting the "Tuning" policy.

[the_rock]

Does it happen only on some machines randomly?

Andy

[lluner]

Hi andy 

They complain about the machine's slowness and it shows this information, both I/O and the process that is consuming a lot. I believe that the checkpoint could have a thoubleshooting to identify or some configuration regarding this forensic blade that always consumes a lot of I/O, it is worth noting that the disk is NVME

[dukenukemz]

Does the same thing happen on machines with 16GB of ram? it looks like your 8GB of ram is maxed out. On the policy > Behavioral protection > Advanced SEttings > Select Low Memory Mode.

See if that helps

[the_rock · Accepted solution]

Hm...since you made all the exceptions, might be worth check with TAC.

Andy

[Chris_Atkinson · Accepted solution]

Short of testing E89.00 to see if EPS-59766 is a potential factor here I would suggest engaging with TAC on this.