Endpoint Security

Hello everyone, does anyone have any idea how I can see exactly which processes have been killed? In Secure Endpoint I can only find the file observables but no command line. How would you continue your research here? Thanks in advance.  

Boa tarde pessoal, como estão?   Gostaria de verificar com vocês se seria possível bloquear no Secure Endpoint uma versão especifica do Webex. Se for possível poderiam me repassar esse passo a passo? Agradeço.

Hello,I am currently working on an integration that requires me to export details about our computers from the Secure Endpoint APIOne of the information I'm interested in is the timestamp from the last AV definition update.However, I have noticed tha...

I am using python to interact with this API: https://developer.cisco.com/docs/cloud-security/#!destinations-delete-destinations-from-destination-listWhen I run my code, I get 200 success, BUT the domain I supposedly removed is still there when I look...

Hello,We have users connecting through the VPN (SSL VPN) with the any connect client. I'm asked to look at possible solutions to add an MFA authentication.Currently, users log into the VPN with their LDAP account.the ASA queries an internal radius se...

Hello, we are testing file quarantine on a newly built sensitive server. I want to understand if there is a way for us quickly reverse the quarantined file and restore it on the server? I want to undo the quarantine action on the server. Thanks in ad...

HiI am trying to sperate computers between the organizations we are managing but unfortunately, I was unable to find any option that I could move several computers from One Organization to Another in Cisco AMP Online Console Uninstalling Connectors f...

Hi All,We are using shared machine like multiple machine hosted on Single VM server, where we Observed our duplication of user in Mrr Server policy but when i check Mrr User policy no such duplication i found. Can anyone help the root cause of this.S...

Hello, I have several computers in the company and I wonder if it would be possible for each computer to belong to group A (for example) in AD has a group policy in AMP and if I belong to a computer for group A the computer becomes a member of AMP gr...

I have been using the Powershell code below to access Secure Endpoint to do maintenance tasks for a couple of years now.  Removing dups, exporting computers...etc.  As of a few days ago I am getting a "Invoke-RestMethod : The remote server returned a...

Greetings,I'm doing a bulk update of the AMP connector through Management > Policies > Product Updates. I know that the machines will update to this version over the next couple days - what I'm not seeing is CiscoAMP show up in Programs and Features ...

Can help but notice the last 2 client versions are "superseded" and go straight to unsupported in the console. Thats fine and dandy, but with 20k clients its kinda hard to keep up, and now, according to the console we will not have support if we enco...

Hi, Please advise if we have various versions of AMP installed in our environment, would it be possible to uninstall all the previous versions that are installed in various machines, using the latest version of AMP client only, and using the silent u...

I'm trying to find information resources that can provide some insight as to how others have overcome the challenge with managing servers and their applied policy, when it comes to necessary exclusions and policy options.  Presently I am using 1 poli...