Issue
Will banned hashes continue to be banned after sensor service is stopped?
Environment
VMware Carbon Black EDR (Response) w/ Process Banning Enabled
Resolution
The sensor service needs to be running in order to ban processes that have been banned.
In other words, if the sensor has been disabled, banned hashes will not be terminated until the sensor service begins to run.