Endpoint Security

Anyone seeing Flash Scans kicked off by Cisco AMP killing legit processes, like chrome.exe, excel.exe lsass.exe, spoolsv.exe, etc? Showing up in Events as an Exploit Prevented? This has only crept up for us today, and is maybe related to the 7.0.5.11...

Hello,How may I initiate a scan on multiple endpoints at once?They are are dispersed and not on one specific network.

Event Type: Cloud IOCFile: powershell.exeFile path: C:/Windows/system32/WindowsPowerShell/v1.0/powershell.exeI get this alert for all CyberArk EPM Clients where the CyberArk EndPoint Management (EPM) Agent uses PowerShell scripts to implement CyberAr...

We have a few Windows PCs from a previous customer that still have AMP/Secure Endpoint installed and continue to check in to the console.  We no longer have access to these devices.  We have tried to delete, but they keep coming back in to the consol...

Hi,Has any of you been able to install AMP for Endpoint on Fedora 35? Does anyone know of anything in the roadmap for AMP on Fedora ? Regards,VamsI Krishna

Hello,How can we push update for connectors for Macs?I have policies for both Windows and Macs aligned to the same settings, however, only Windows seem to be pulling the product updates automatically. 

Hi, I am trying to update the Cisco AMP connector on our clients.  Is there anyway I can force the updates from the AMP console, as even when I schedule the updates, some of the hosts are not updating the clients. Is there also a method to update the...

We're starting the deployment of AMP4E on the Windows 10 workstations, so far so good until a helpdesk tech tried to push a Kasperky update on a PC with AMP. It failed with: Kaspersky Endpoint Security 11 for Windows (Strong encryption) (11.1.1.126):...

Greetings, Seeing odd behavior where an application runs fine when AMP is disabled but errors when AMP is turned on.  Folders/file/etc. have been whitelisted and AMP dashboard shows no indication it's blocking or otherwise considers the file bad.  Tr...

Is there a simple way to search my org with Cisco Endpoint for a specific IoC?I can find details on a specific IoC when I search the upper corner, but it doesn't tell me if its ever showed up on my network.Point me in the right direction if you can. ...