If you open a TAC case, they can collect some logs and recommend specific Exploit Prevention exclusions that would allow you to use the engine but exclude a specific DLL. You might also want to try upgrading to a newer version of the connector. The i...

This is likely caused by the Exploit Prevention engine. Even in Audit mode it performs memory monitoring tasks for alerting that could potentially interfere like this. I suggest disabling the Exploit Prevention engine to test and see if the issue is ...

There is no way to achieve this through the UI, but you can use the /v1/computers/{connector_guid}/trajectory API endpoint. More information is available here:https://developer.cisco.com/docs/secure-endpoint/v1-api-reference-computer/Thanks, Matt