sms.exe and winlogon.exe

[Sheree]

Hello Everyone,

I wanted to inform that I am receiving several threat detections in our environment. Is anyone else receiving these? These are all considered "medium" and the smss.exe and winlogon.exe files scan clean. We are running version 8.2.1.21650.  This didn't begin to alert until I updated the connector version.  any thoughts?

[helpcenterus]

Hi @Sheree, it's essential to ensure that the threat detections are not false positives, especially if scans on smss.exe and winlogon.exe are consistently returning clean results. Consider checking if there have been any changes in the threat detection settings or policies after the update.