To stay updated on your favorite discussions, please create an account or log in. Then, click the Bookmark icon to subscribe and receive notifications.

Open-AudIT

Jan-Eric
Jan-Eric Member Posts: 16 Cyber Knight
edited July 22 in Elements Endpoint Protection (EPP)

I'm trying out OpenAudIT to scan local network but Elements Agent blocks winexesvc.exe to execute on local hosts. Is there any way of allowing the app to be run on hosts from a specific IP/server?

vcsfrg2w54gc24ty5v24vct5t2c45234.png

Best Answer

  • JamesC
    JamesC Staff, Moderator Posts: 559 W/ Moderator
    Solved

    Hi @Jan-Eric ,

    Thank you for reaching out to WithSecure Community.


    Winexesvc.exe is a software that allows administrator users to execute commands remotely on WindowsNT/2000/XP/2003/Vista/2003/2008 systems from GNU/Linux.


    This can be consider as Potentially Unwanted Application (PUA) because it can be used for good purpose or bad purpose.

    You may allow by adding exclusion or try with Application Control feature if available.

    But from our side, the detection will remain.

This discussion has been closed.

Categories