Endpoint Security

For the last few hours we have been seeing an increasing number of 'Powershell command in registry data' findings.They all look the same and report something similar: ObservablesFile:taskhostw.exe   e6370920…58402728Registry Key:\USER\S-1-5-21-151419...

Dear Cisco team,I'm a software developer, I have installed Cisco Secure Endpoint 8.2.1.21650 and Secure Client 5.0.00837.When I compile a Visual Studio solution which contains about 80 C++ projects. The compilation and linking fails with the errors l...

Hello Everyone,I wanted to inform that I am receiving several threat detections in our environment. Is anyone else receiving these? These are all considered "medium" and the smss.exe and winlogon.exe files scan clean. We are running version 8.2.1.216...

HiSeveral Computers at my end are connected to panel but they haven't received the AV DB update yet.is there any process that I manually trigger the update through the dashboard ? ( I know I can do it through the program interface or launching SFC.ex...

Hello, we are in the process of deploying all the agents on our AWS ec2 instances and want to understand if I have to open ingress or egress traffic for the communication with cisco consoleWill cisco agent do a push action or cisco console does pull ...

When Endpoint DLP policy by ManageEngine injects dll's into processes to monitor sensitive file transfer actions or events, Cisco amp kills the process where the dll is injected into. There is no option to exclude dll injections from specific vendors...

During an automated isolation response from secure client, will the Isolated device still be reachable from the Secure client dashboard, and will the device communicate using DNS and be protected by Umbrella?

Hi everybody, Kindly advise how do i extend my Cisco ISE 2.6  evaluation license.90 days period is about to end & my base license usage is less than 30.  Thanks in advance.

Hi, yes, it is possible to extend a Cisco ISE Evaluation. You just need a working Smart Account and to transfer the UDI Details of ISE "Administration > System > Licensing" to Cisco via. https://cep.cloudapps.cisco.com/#/ or in my case, it was like t...

Hello,I noticed a minor error in the Secure Endpoint API documentation that I wanted to bring to your attention.The HTTP response headers are listed asX-Rate-Limit-*but when I tried calling "https://api.eu.amp.cisco.com/v1/computers", the API returne...

Hello everyone, does anyone have any idea how I can see exactly which processes have been killed? In Secure Endpoint I can only find the file observables but no command line. How would you continue your research here? Thanks in advance.  

Boa tarde pessoal, como estão?   Gostaria de verificar com vocês se seria possível bloquear no Secure Endpoint uma versão especifica do Webex. Se for possível poderiam me repassar esse passo a passo? Agradeço.

Hello,I am currently working on an integration that requires me to export details about our computers from the Secure Endpoint APIOne of the information I'm interested in is the timestamp from the last AV definition update.However, I have noticed tha...