On one of our servers which runs many databases, the AMP temp file for scanning appears to be ballooning to 15+ gigs and filling up the C drive. Is there a way to see exactly what AMP is scanning so we can adjust out exclusions appropriately? 

"This is because they have been signed by a trusted certification authority, and AMP has safeguards against potential false positive detections."   This seems like a pretty bad idea. What about things like CCleaner that was packaged with malware last...

We recently attended a "test drive" class for Cisco AMP where they mentioned that AMP was approved by Microsoft as a 3rd party AV client that should disable windows defender. I've linked the KB below. We have several test machines with AMP deployed t...