Skip to main content

Why does Symantec Endpoint Protection (or SEP for Small business) report that Endpoint Policy Manager is "tampering" ?

You might see Symentec logs like what's seen below.

PPExtensionService.exe needs to "look at" every process that gets started, and opens handles to them.

Additionally, Netwrix Endpoint Policy Manager (formerly PolicyPak) AppLock also doesn't discriminate the applications running on the machine; and as such, you might see PPWatcherSvc64.exe in some of the logs.

So, Symantec is detecting and reporting that.

This is by design in Endpoint Policy Manager and cannot be changed at this time.

Category: Symantec Product Tamper ProtectionDate & Time,Risk,Activity,Status,Recommended Action,Date,Actor,Actor PID,Target,Target PID,Action,Reaction,Terminal Session23/08/2018 8:59:17 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:59:17 AM,C:PROGRAM FILESPOLICYPAKAPPLICATION MANAGERCLIENT18.3.1649PPWATCHERSVC64.EXE,7264,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,6328,Access Process Data,Unauthorized access blocked,123/08/2018 8:58:22 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:58:22 AM,C:PROGRAM FILESPOLICYPAKAPPLICATION MANAGERCLIENT18.3.1649PPWATCHERSVC64.EXE,7264,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,6328,Access Process Data,Unauthorized access blocked,123/08/2018 8:57:27 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:57:27 AM,C:PROGRAM FILESPOLICYPAKAPPLICATION MANAGERCLIENT18.3.1649PPWATCHERSVC64.EXE,7264,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,6328,Access Process Data,Unauthorized access blocked,123/08/2018 8:56:29 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:56:29 AM,C:PROGRAM FILESPOLICYPAKAPPLICATION MANAGERCLIENT18.3.1649PPWATCHERSVC64.EXE,7264,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13MCUI32.exe,15840,Access Process Data,Unauthorized access blocked,123/08/2018 8:56:28 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:56:28 AM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13WSCStub.exe,14260,Access Process Data,Unauthorized access blocked,23/08/2018 8:53:21 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:53:21 AM,C:PROGRAM FILESPOLICYPAKAPPLICATION MANAGERCLIENT18.3.1649PPWATCHERSVC64.EXE,7264,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13MCUI32.exe,792,Access Process Data,Unauthorized access blocked,123/08/2018 8:53:21 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:53:21 AM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13MCUI32.exe,792,Access Process Data,Unauthorized access blocked,23/08/2018 8:52:39 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:52:39 AM,C:PROGRAM FILESPOLICYPAKAPPLICATION MANAGERCLIENT18.3.1649PPWATCHERSVC64.EXE,7264,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13MCUI32.exe,15868,Access Process Data,Unauthorized access blocked,123/08/2018 8:52:39 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:52:39 AM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13MCUI32.exe,15868,Access Process Data,Unauthorized access blocked,23/08/2018 8:52:36 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:52:36 AM,C:PROGRAM FILESPOLICYPAKAPPLICATION MANAGERCLIENT18.3.1649PPWATCHERSVC64.EXE,7264,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13MCUI32.exe,11008,Access Process Data,Unauthorized access blocked,123/08/2018 8:52:36 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:52:36 AM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13MCUI32.exe,11008,Access Process Data,Unauthorized access blocked,23/08/2018 8:52:21 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:52:21 AM,C:PROGRAM FILESPOLICYPAKAPPLICATION MANAGERCLIENT18.3.1649PPWATCHERSVC64.EXE,7264,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,6328,Access Process Data,Unauthorized access blocked,123/08/2018 8:51:41 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:51:41 AM,C:PROGRAM FILESPOLICYPAKAPPLICATION MANAGERCLIENT18.3.1649PPWATCHERSVC64.EXE,7264,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,6328,Access Process Data,Unauthorized access blocked,123/08/2018 8:51:23 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:51:23 AM,C:PROGRAM FILESPOLICYPAKAPPLICATION MANAGERCLIENT18.3.1649PPWATCHERSVC64.EXE,7264,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,6328,Access Process Data,Unauthorized access blocked,123/08/2018 8:51:03 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:51:03 AM,C:PROGRAM FILESPOLICYPAKAPPLICATION MANAGERCLIENT18.3.1649PPWATCHERSVC64.EXE,7264,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,6328,Access Process Data,Unauthorized access blocked,123/08/2018 8:49:18 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:49:18 AM,C:PROGRAM FILESPOLICYPAKAPPLICATION MANAGERCLIENT18.3.1649PPWATCHERSVC64.EXE,7264,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,6328,Access Process Data,Unauthorized access blocked,123/08/2018 8:49:17 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:49:17 AM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13coNatHst.exe,14492,Access Process Data,Unauthorized access blocked,23/08/2018 8:49:07 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:49:07 AM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,9028,Access Process Data,Unauthorized access blocked,23/08/2018 8:37:09 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:37:09 AM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,10336,Access Process Data,Unauthorized access blocked,23/08/2018 8:19:02 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:19:02 AM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,15272,Access Process Data,Unauthorized access blocked,23/08/2018 8:06:48 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:06:48 AM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,11352,Access Process Data,Unauthorized access blocked,23/08/2018 7:49:00 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 7:49:00 AM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,15412,Access Process Data,Unauthorized access blocked,23/08/2018 7:42:00 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 7:42:00 AM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,9492,Access Process Data,Unauthorized access blocked,23/08/2018 7:36:48 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 7:36:48 AM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,16796,Access Process Data,Unauthorized access blocked,23/08/2018 7:18:56 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 7:18:56 AM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,7092,Access Process Data,Unauthorized access blocked,23/08/2018 7:06:47 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 7:06:47 AM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,904,Access Process Data,Unauthorized access blocked,23/08/2018 6:48:53 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 6:48:53 AM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,14956,Access Process Data,Unauthorized access blocked,23/08/2018 6:36:47 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 6:36:47 AM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,10588,Access Process Data,Unauthorized access blocked,23/08/2018 6:18:49 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 6:18:49 AM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,7048,Access Process Data,Unauthorized access blocked,23/08/2018 6:06:47 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 6:06:47 AM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,14880,Access Process Data,Unauthorized access blocked,23/08/2018 5:52:25 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 5:52:25 AM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,4324,Access Process Data,Unauthorized access blocked,23/08/2018 5:50:05 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 5:50:05 AM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,15892,Access Process Data,Unauthorized access blocked,23/08/2018 5:48:46 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 5:48:46 AM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,4084,Access Process Data,Unauthorized access blocked,23/08/2018 5:36:47 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 5:36:47 AM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,15492,Access Process Data,Unauthorized access blocked,23/08/2018 5:18:42 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 5:18:42 AM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,7532,Access Process Data,Unauthorized access blocked,23/08/2018 5:06:47 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 5:06:47 AM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,13768,Access Process Data,Unauthorized access blocked,23/08/2018 4:48:39 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 4:48:39 AM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,12744,Access Process Data,Unauthorized access blocked,23/08/2018 4:36:47 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 4:36:47 AM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,7140,Access Process Data,Unauthorized access blocked,23/08/2018 4:18:35 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 4:18:35 AM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,11836,Access Process Data,Unauthorized access blocked,23/08/2018 4:06:47 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 4:06:47 AM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,16556,Access Process Data,Unauthorized access blocked,23/08/2018 3:48:33 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 3:48:33 AM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,14100,Access Process Data,Unauthorized access blocked,23/08/2018 3:36:47 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 3:36:47 AM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,10164,Access Process Data,Unauthorized access blocked,23/08/2018 3:18:28 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 3:18:28 AM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,10184,Access Process Data,Unauthorized access blocked,23/08/2018 3:06:47 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 3:06:47 AM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,9628,Access Process Data,Unauthorized access blocked,23/08/2018 2:48:26 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 2:48:26 AM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,72,Access Process Data,Unauthorized access blocked,23/08/2018 2:36:47 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 2:36:47 AM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,9688,Access Process Data,Unauthorized access blocked,23/08/2018 2:18:21 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 2:18:21 AM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,11380,Access Process Data,Unauthorized access blocked,23/08/2018 2:06:47 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 2:06:47 AM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,9376,Access Process Data,Unauthorized access blocked,23/08/2018 1:50:05 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 1:50:05 AM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,12208,Access Process Data,Unauthorized access blocked,23/08/2018 1:48:19 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 1:48:19 AM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,11852,Access Process Data,Unauthorized access blocked,23/08/2018 1:36:47 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 1:36:47 AM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,7980,Access Process Data,Unauthorized access blocked,23/08/2018 1:18:14 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 1:18:14 AM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,16896,Access Process Data,Unauthorized access blocked,23/08/2018 1:06:47 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 1:06:47 AM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,15912,Access Process Data,Unauthorized access blocked,23/08/2018 12:48:10 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 12:48:10 AM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,2860,Access Process Data,Unauthorized access blocked,23/08/2018 12:36:47 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 12:36:47 AM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,12196,Access Process Data,Unauthorized access blocked,23/08/2018 12:18:08 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 12:18:08 AM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,7236,Access Process Data,Unauthorized access blocked,23/08/2018 12:06:07 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 12:06:07 AM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,9672,Access Process Data,Unauthorized access blocked,22/08/2018 11:48:03 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 11:48:03 PM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,10952,Access Process Data,Unauthorized access blocked,22/08/2018 11:35:47 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 11:35:47 PM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,14280,Access Process Data,Unauthorized access blocked,22/08/2018 11:18:01 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 11:18:01 PM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,14904,Access Process Data,Unauthorized access blocked,22/08/2018 11:05:47 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 11:05:47 PM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,7436,Access Process Data,Unauthorized access blocked,22/08/2018 10:47:57 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 10:47:57 PM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,6852,Access Process Data,Unauthorized access blocked,22/08/2018 10:35:47 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 10:35:47 PM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,2244,Access Process Data,Unauthorized access blocked,22/08/2018 10:17:52 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 10:17:52 PM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,14660,Access Process Data,Unauthorized access blocked,22/08/2018 10:05:47 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 10:05:47 PM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,16528,Access Process Data,Unauthorized access blocked,22/08/2018 9:50:05 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 9:50:05 PM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,9084,Access Process Data,Unauthorized access blocked,22/08/2018 9:48:43 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 9:48:43 PM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,4324,Access Process Data,Unauthorized access blocked,22/08/2018 9:47:47 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 9:47:47 PM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,17392,Access Process Data,Unauthorized access blocked,22/08/2018 9:35:47 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 9:35:47 PM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,8448,Access Process Data,Unauthorized access blocked,22/08/2018 9:17:45 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 9:17:45 PM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,8544,Access Process Data,Unauthorized access blocked,22/08/2018 9:05:47 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 9:05:47 PM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,17152,Access Process Data,Unauthorized access blocked,22/08/2018 8:47:42 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 8:47:42 PM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,15880,Access Process Data,Unauthorized access blocked,22/08/2018 8:35:47 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 8:35:47 PM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,9168,Access Process Data,Unauthorized access blocked,22/08/2018 8:17:40 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 8:17:40 PM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,14400,Access Process Data,Unauthorized access blocked,22/08/2018 8:05:47 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 8:05:47 PM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,15832,Access Process Data,Unauthorized access blocked,22/08/2018 7:47:38 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 7:47:38 PM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,15592,Access Process Data,Unauthorized access blocked,22/08/2018 7:35:47 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 7:35:47 PM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13symerr.exe,12948,Access Process Data,Unauthorized access blocked,22/08/2018 7:17:35 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 7:17:35 PM,C:PROGRAM FILESendpointpolicymanagerCOREPPEXTENSIONSERVICE.EXE,4424,C:Program FilesSymantec.cloudEndpointProtectionAgentEngine22.14.2.13NortonSecurity.exe,3892,Access Process Data,Unauthorized access blocked,