You might see Symentec logs like what’s seen below.
PPExtensionService.exe needs to “look at” every process that gets started, and opens handles to them.
Additionally, PolicyPak AppLock also doesn’t discriminate the applications running on the machine; and as such, you might see PPWatcherSvc64.exe in some of the logs.
So, Symantec is detecting and reporting that.
This is by design in PolicyPak and cannot be changed at this time.
Category: Symantec Product Tamper Protection
Date & Time,Risk,Activity,Status,Recommended Action,Date,Actor,Actor PID,Target,Target PID,Action,Reaction,Terminal Session
23/08/2018 8:59:17 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:59:17 AM,
C:PROGRAM FILESPOLICYPAKAPPLICATION MANAGERCLIENT18.3.1649PPWATCHERSVC64.EXE,7264,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,6328,Access Process Data,Unauthorized access blocked,1
23/08/2018 8:58:22 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:58:22 AM,
C:PROGRAM FILESPOLICYPAKAPPLICATION MANAGERCLIENT18.3.1649PPWATCHERSVC64.EXE,7264,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,6328,Access Process Data,Unauthorized access blocked,1
23/08/2018 8:57:27 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:57:27 AM,
C:PROGRAM FILESPOLICYPAKAPPLICATION MANAGERCLIENT18.3.1649PPWATCHERSVC64.EXE,7264,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,6328,Access Process Data,Unauthorized access blocked,1
23/08/2018 8:56:29 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:56:29 AM,
C:PROGRAM FILESPOLICYPAKAPPLICATION MANAGERCLIENT18.3.1649PPWATCHERSVC64.EXE,7264,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13MCUI32.exe,15840,Access Process Data,Unauthorized access blocked,1
23/08/2018 8:56:28 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:56:28 AM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13WSCStub.exe,14260,Access Process Data,Unauthorized access blocked,
23/08/2018 8:53:21 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:53:21 AM,
C:PROGRAM FILESPOLICYPAKAPPLICATION MANAGERCLIENT18.3.1649PPWATCHERSVC64.EXE,7264,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13MCUI32.exe,792,Access Process Data,Unauthorized access blocked,1
23/08/2018 8:53:21 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:53:21 AM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13MCUI32.exe,792,Access Process Data,Unauthorized access blocked,
23/08/2018 8:52:39 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:52:39 AM,
C:PROGRAM FILESPOLICYPAKAPPLICATION MANAGERCLIENT18.3.1649PPWATCHERSVC64.EXE,7264,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13MCUI32.exe,15868,Access Process Data,Unauthorized access blocked,1
23/08/2018 8:52:39 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:52:39 AM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13MCUI32.exe,15868,Access Process Data,Unauthorized access blocked,
23/08/2018 8:52:36 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:52:36 AM,
C:PROGRAM FILESPOLICYPAKAPPLICATION MANAGERCLIENT18.3.1649PPWATCHERSVC64.EXE,7264,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13MCUI32.exe,11008,Access Process Data,Unauthorized access blocked,1
23/08/2018 8:52:36 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:52:36 AM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13MCUI32.exe,11008,Access Process Data,Unauthorized access blocked,
23/08/2018 8:52:21 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:52:21 AM,
C:PROGRAM FILESPOLICYPAKAPPLICATION MANAGERCLIENT18.3.1649PPWATCHERSVC64.EXE,7264,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,6328,Access Process Data,Unauthorized access blocked,1
23/08/2018 8:51:41 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:51:41 AM,
C:PROGRAM FILESPOLICYPAKAPPLICATION MANAGERCLIENT18.3.1649PPWATCHERSVC64.EXE,7264,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,6328,Access Process Data,Unauthorized access blocked,1
23/08/2018 8:51:23 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:51:23 AM,
C:PROGRAM FILESPOLICYPAKAPPLICATION MANAGERCLIENT18.3.1649PPWATCHERSVC64.EXE,7264,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,6328,Access Process Data,Unauthorized access blocked,1
23/08/2018 8:51:03 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:51:03 AM,
C:PROGRAM FILESPOLICYPAKAPPLICATION MANAGERCLIENT18.3.1649PPWATCHERSVC64.EXE,7264,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,6328,Access Process Data,Unauthorized access blocked,1
23/08/2018 8:49:18 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:49:18 AM,
C:PROGRAM FILESPOLICYPAKAPPLICATION MANAGERCLIENT18.3.1649PPWATCHERSVC64.EXE,7264,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,6328,Access Process Data,Unauthorized access blocked,1
23/08/2018 8:49:17 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:49:17 AM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13coNatHst.exe,14492,Access Process Data,Unauthorized access blocked,
23/08/2018 8:49:07 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:49:07 AM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,9028,Access Process Data,Unauthorized access blocked,
23/08/2018 8:37:09 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:37:09 AM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,10336,Access Process Data,Unauthorized access blocked,
23/08/2018 8:19:02 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:19:02 AM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,15272,Access Process Data,Unauthorized access blocked,
23/08/2018 8:06:48 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:06:48 AM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,11352,Access Process Data,Unauthorized access blocked,
23/08/2018 7:49:00 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 7:49:00 AM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,15412,Access Process Data,Unauthorized access blocked,
23/08/2018 7:42:00 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 7:42:00 AM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,9492,Access Process Data,Unauthorized access blocked,
23/08/2018 7:36:48 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 7:36:48 AM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,16796,Access Process Data,Unauthorized access blocked,
23/08/2018 7:18:56 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 7:18:56 AM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,7092,Access Process Data,Unauthorized access blocked,
23/08/2018 7:06:47 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 7:06:47 AM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,904,Access Process Data,Unauthorized access blocked,
23/08/2018 6:48:53 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 6:48:53 AM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,14956,Access Process Data,Unauthorized access blocked,
23/08/2018 6:36:47 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 6:36:47 AM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,10588,Access Process Data,Unauthorized access blocked,
23/08/2018 6:18:49 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 6:18:49 AM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,7048,Access Process Data,Unauthorized access blocked,
23/08/2018 6:06:47 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 6:06:47 AM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,14880,Access Process Data,Unauthorized access blocked,
23/08/2018 5:52:25 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 5:52:25 AM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,4324,Access Process Data,Unauthorized access blocked,
23/08/2018 5:50:05 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 5:50:05 AM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,15892,Access Process Data,Unauthorized access blocked,
23/08/2018 5:48:46 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 5:48:46 AM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,4084,Access Process Data,Unauthorized access blocked,
23/08/2018 5:36:47 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 5:36:47 AM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,15492,Access Process Data,Unauthorized access blocked,
23/08/2018 5:18:42 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 5:18:42 AM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,7532,Access Process Data,Unauthorized access blocked,
23/08/2018 5:06:47 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 5:06:47 AM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,13768,Access Process Data,Unauthorized access blocked,
23/08/2018 4:48:39 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 4:48:39 AM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,12744,Access Process Data,Unauthorized access blocked,
23/08/2018 4:36:47 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 4:36:47 AM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,7140,Access Process Data,Unauthorized access blocked,
23/08/2018 4:18:35 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 4:18:35 AM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,11836,Access Process Data,Unauthorized access blocked,
23/08/2018 4:06:47 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 4:06:47 AM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,16556,Access Process Data,Unauthorized access blocked,
23/08/2018 3:48:33 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 3:48:33 AM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,14100,Access Process Data,Unauthorized access blocked,
23/08/2018 3:36:47 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 3:36:47 AM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,10164,Access Process Data,Unauthorized access blocked,
23/08/2018 3:18:28 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 3:18:28 AM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,10184,Access Process Data,Unauthorized access blocked,
23/08/2018 3:06:47 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 3:06:47 AM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,9628,Access Process Data,Unauthorized access blocked,
23/08/2018 2:48:26 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 2:48:26 AM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,72,Access Process Data,Unauthorized access blocked,
23/08/2018 2:36:47 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 2:36:47 AM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,9688,Access Process Data,Unauthorized access blocked,
23/08/2018 2:18:21 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 2:18:21 AM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,11380,Access Process Data,Unauthorized access blocked,
23/08/2018 2:06:47 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 2:06:47 AM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,9376,Access Process Data,Unauthorized access blocked,
23/08/2018 1:50:05 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 1:50:05 AM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,12208,Access Process Data,Unauthorized access blocked,
23/08/2018 1:48:19 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 1:48:19 AM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,11852,Access Process Data,Unauthorized access blocked,
23/08/2018 1:36:47 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 1:36:47 AM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,7980,Access Process Data,Unauthorized access blocked,
23/08/2018 1:18:14 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 1:18:14 AM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,16896,Access Process Data,Unauthorized access blocked,
23/08/2018 1:06:47 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 1:06:47 AM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,15912,Access Process Data,Unauthorized access blocked,
23/08/2018 12:48:10 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 12:48:10 AM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,2860,Access Process Data,Unauthorized access blocked,
23/08/2018 12:36:47 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 12:36:47 AM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,12196,Access Process Data,Unauthorized access blocked,
23/08/2018 12:18:08 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 12:18:08 AM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,7236,Access Process Data,Unauthorized access blocked,
23/08/2018 12:06:07 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 12:06:07 AM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,9672,Access Process Data,Unauthorized access blocked,
22/08/2018 11:48:03 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 11:48:03 PM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,10952,Access Process Data,Unauthorized access blocked,
22/08/2018 11:35:47 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 11:35:47 PM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,14280,Access Process Data,Unauthorized access blocked,
22/08/2018 11:18:01 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 11:18:01 PM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,14904,Access Process Data,Unauthorized access blocked,
22/08/2018 11:05:47 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 11:05:47 PM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,7436,Access Process Data,Unauthorized access blocked,
22/08/2018 10:47:57 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 10:47:57 PM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,6852,Access Process Data,Unauthorized access blocked,
22/08/2018 10:35:47 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 10:35:47 PM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,2244,Access Process Data,Unauthorized access blocked,
22/08/2018 10:17:52 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 10:17:52 PM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,14660,Access Process Data,Unauthorized access blocked,
22/08/2018 10:05:47 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 10:05:47 PM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,16528,Access Process Data,Unauthorized access blocked,
22/08/2018 9:50:05 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 9:50:05 PM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,9084,Access Process Data,Unauthorized access blocked,
22/08/2018 9:48:43 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 9:48:43 PM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,4324,Access Process Data,Unauthorized access blocked,
22/08/2018 9:47:47 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 9:47:47 PM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,17392,Access Process Data,Unauthorized access blocked,
22/08/2018 9:35:47 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 9:35:47 PM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,8448,Access Process Data,Unauthorized access blocked,
22/08/2018 9:17:45 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 9:17:45 PM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,8544,Access Process Data,Unauthorized access blocked,
22/08/2018 9:05:47 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 9:05:47 PM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,17152,Access Process Data,Unauthorized access blocked,
22/08/2018 8:47:42 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 8:47:42 PM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,15880,Access Process Data,Unauthorized access blocked,
22/08/2018 8:35:47 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 8:35:47 PM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,9168,Access Process Data,Unauthorized access blocked,
22/08/2018 8:17:40 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 8:17:40 PM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,14400,Access Process Data,Unauthorized access blocked,
22/08/2018 8:05:47 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 8:05:47 PM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,15832,Access Process Data,Unauthorized access blocked,
22/08/2018 7:47:38 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 7:47:38 PM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,15592,Access Process Data,Unauthorized access blocked,
22/08/2018 7:35:47 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 7:35:47 PM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,12948,Access Process Data,Unauthorized access blocked,
22/08/2018 7:17:35 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 7:17:35 PM,
C:PROGRAM FILESPOLICYPAKCOREPPEXTENSIONSERVICE.EXE,4424,
C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,3892,Access Process Data,Unauthorized access blocked,