I was wondering how those in in the Amp for Endpoints Community deal with Generic IOC and Cloud IOC events. The vast majority of events I get are a result of RMM tools (Kaseya, N-Able, Connectwise, etc.) used by MSPs to manage the workstations. The...
Forum Posts
We are installing cisco universal client can anyone please guide for cisco AMP enabler module what would be the file format ?The File Format will be XML or JASON ?Where the file will be stored or in which folder file will be saved ?
I deployed Cisco Secure Endpoint Windows Connector 8.1.7. Deploying it to our end users locked up Office, some browsers, and some shortcuts became unresponsive. After removal of 8.1.7 the issue went away. Reverting back 8.1.5Anyone else having an iss...
HelloCan I have some guidance and assistance please. Our organisation currently has Microsoft MDE running alongside Microsoft Edge and we have recently subscribed to Umbrella SIG. Recently we have been getting notifications from MDE of websites/URLs ...
Hello,I follow the progress of the installation of Cisco connectors for my collaborators.My goal is to identify laggards who haven't installed the antivirus yet. From the console, I can't find the usernames, I only see the hostname of the computers. ...
Talos reputation ticket created... And resolved before I finished this post... Detection: W32.1C27878DDF.RET.SBX.TGFile: mpavdlta.vdmFile path: \\?\C:\Windows\Temp\D3A7A9B3-EF42-4962-BED8-953AD7FE65811330.1d96d3272ec45c5\mpavdlta.vdmDetection SHA...
This morning I started seeing retrospective quarantine failures for Newtonsoft.Json.dll. I see conflicting results when searching for this .dll. The SHA is SHA256: c5c83bbc1741be6ff4c490c0aee34c162945423ec577c646538b2d21ce13199e
Hi all there, I need your help, I tried to connect in cortex Cisco AMP, but need to have "AMP for Endpoints Simple Custom Detection GUID". Can anyone help me how can I get. I created simple and assigned it to my police, but GUID for this group nowher...
Is it possible to initiate a scan to endpoint with an API call? I haven't noticed any methods from reviewing the API documentation:Secure Endpoint API - Cisco DeveloperThanks!
Does anyone know when the Secure Endpoint Module will be available for MACOS?I have installed the latest one (5.0.02075) and still getting the old option "Cisco AMP Enabler"Is this part of Cisco's 2023 roadmap?It would be nice to manage one less app.
Does anyone encounter this Tetra update error on a Windows 2019 server running with Cisco Secure Endpoint version 8.1.5? First time seeing this error. After upgrading the version from 7.5.5 to 8.1.5, the initial error was -2113 which, according to C...
Hello.I have installed Endpoint protection and it´s not showing up.Can someone explain what they are meaning?There is an antivirus is running on the user level but while verifying the security manager we can see there is no antivirus registered.For ...
A few months back, we deployed Cisco Secure Endpoint 8.0.1 to our pilot Windows group and then our production Windows group. In testing there were seemingly no issues; However, eventually we began to notice that after these upgrades, Windows 10 (most...
False positive? Just got a bunch of these off multiple MXs. MD5 : 346cac4d1166ef87ab7617fc977f7dd4SHA-1 d4bf1fc804bef6293d867c5f250191860044639cSHA-256 975c0d48c41d2ad76a242d5f7270f4bf8063bb9c753b375ab2c47c9e2060f562Vhash 3872fcc78e34962257f24cc7728...
Hello everyone, 1st post here, we have been receiving a lot of alerts regarding firefox, see #2. Also I would like to know if #1 is a false positive, Thanks for your help Secure Endpoint found a total of 1 events matching your subscription named Indi...
