XDR sometimes blocks the use of left mouse clicks on Windows Start Menu

[RStanilewicz]

We've deployed the Cortex XDR agent version 7.1.2 to 50-60 end-user machines so far. 2 users have reported the agent has stopped the use of left mouse clicks on the Windows Start Menu and Search Box. Right mouse clicks work fine. As soon as we removed the agent from those machines the Start Menu and Search Box started to work with left mouse clicks.

We've put our full deployment of the Cortex XDR agent on hold for the moment until we can find a fix.

Have anyone had a similar issue? 

[DKasabji]

This does not seem to be issue with the Agent. I would investigate what's going on on those specific endpoints.

1. Were you able to see any alerts / logs on Cortex XDR interface when this issues occurred?

2. Are these endpoints running the same Windows version (KB) as all other Windows machines?

3. Maybe there are some drivers installed on those two machines that intervene with Cortex XDR Agent?

4. Did you try to reboot the machines once you installed the Agent?

5. I am sure you checked, but I'll ask, have you checked whether there is any incompatible software installed on the machines?

6. You could also create a special policy, where profiles would be very mild towards Blocking the processes. Be sure to apply the policy only to the two endpoints and put the priority over other policies, by re-ordering it. If this eliminates the problem, we'd know that some protection module is intervening. You could start then detecting which one (1-by-1 elimination) and once you know which one it is, you could find out which file, driver, etc. caused it.

Finally, by now you perhaps already know, there agent version 7.2. available, which you can try as last result. 

[jamesjackson]

So this is happening to me too and it has to be XDR related as it stops happening once the agent is removed.

Will report as a bug