Endpoint Security

Hello. We use Veeam Backup and Replication for backup and for Surebackup (and for anti malware scanning of backupfiles) in a vmware vcenter environment. Veeam B&R can be configured through a AntivirusInfos.xml file to use products like  Symantec Prot...

Hi. I wanted to toss this out there to see if anyone else encountered this in the last week or so.This morning, I opened up the console to 40% of my endpoints indicating a compromise. I opened one computer to start investigating. I found it to be a r...

I have a laptop which won't start the Amp service.  I've updated it from 8.2.1 8.2.4 and still get the same problem.The event log gives this:Faulting application name: sfc.exe, version: 8.2.4.30130, time stamp: 0x65cfcfa4Faulting module name: sfc.exe...

Hello friends.I'm working on setting up ISE on Azure for our org. we have combination of domain joined windows clients, IP phones and iPads (Apple products). I have two questions to start the process.1- does ISE Essentials License support Apple produ...

Hi, The File Detection category generates a lot of alerts on browser cache with signatures like these:GT:JS.Hyena.xGT:JS.Injected.xTrojan.Generic.xTrojan.GenericKD.xAuto.x.in02W32.x.in12.TalosMost of the time these files are unique so they won't be o...

I am new to cisco endpoint and will need some help in creating rolling 3 months analysis for end point positive detectionsand also analysis for false positive detection.Any help and directions will be deeply appriciated.Thanks 

We're having trouble running Office 365, is there application blocking where files can't be opened, is there any fix or policy enforcement to get it back up and running? Logs: (22455125, +0 ms) Jan 03 14:46:13 [7440]: ERROR: Event::SlowProcessor unab...

Good morning! We're currently facing the challenge of isolating our Linux systems (running Ubuntu and Debian) from the Cisco Secure Endpoint console (formerly known as AMP). Despite our efforts, we haven't been able to find a direct method to achieve...

Hello TALOSSince the retirement of Immunet at the beginning of 2024, has maintenance of Clam AV CVD signature files by Cisco TALOS been impacted? Are the Clam AV community signature sets still being actively maintained by Cisco? Thanks in advance

We have an end user machine that was placed into isolation after a high severity Cloud IOC Event (Cloud IOC: W32.PowershellIEXReplace.ioc) and a low severity Cloud IOC Event (Cloud IOC: W32.PowershellObfuscationAttempt.ioc) was detected.  Powershell ...