Why does Symantec Endpoint Protection (or SEP for Small business) report that PolicyPak is “tampering” ?

You might see Symentec logs like what’s seen below.

PPExtensionService.exe needs to “look at” every process that gets started, and opens handles to them.
Additionally, PolicyPak AppLock also doesn’t discriminate the applications running on the machine; and as such, you might see PPWatcherSvc64.exe in some of the logs.

So, Symantec is detecting and reporting that.

This is by design in PolicyPak and cannot be changed at this time.


Category: Symantec Product Tamper Protection
Date & Time,Risk,Activity,Status,Recommended Action,Date,Actor,Actor PID,Target,Target PID,Action,Reaction,Terminal Session
23/08/2018 8:59:17 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:59:17 AM,
C:\PROGRAM FILES\POLICYPAK\APPLICATION MANAGER\CLIENT\18.3.1649\PPWATCHERSVC64.EXE,7264,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\NortonSecurity.exe,6328,Access Process Data,Unauthorized access blocked,1
23/08/2018 8:58:22 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:58:22 AM,
C:\PROGRAM FILES\POLICYPAK\APPLICATION MANAGER\CLIENT\18.3.1649\PPWATCHERSVC64.EXE,7264,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\NortonSecurity.exe,6328,Access Process Data,Unauthorized access blocked,1
23/08/2018 8:57:27 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:57:27 AM,
C:\PROGRAM FILES\POLICYPAK\APPLICATION MANAGER\CLIENT\18.3.1649\PPWATCHERSVC64.EXE,7264,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\NortonSecurity.exe,6328,Access Process Data,Unauthorized access blocked,1
23/08/2018 8:56:29 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:56:29 AM,
C:\PROGRAM FILES\POLICYPAK\APPLICATION MANAGER\CLIENT\18.3.1649\PPWATCHERSVC64.EXE,7264,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\MCUI32.exe,15840,Access Process Data,Unauthorized access blocked,1
23/08/2018 8:56:28 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:56:28 AM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\WSCStub.exe,14260,Access Process Data,Unauthorized access blocked,
23/08/2018 8:53:21 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:53:21 AM,
C:\PROGRAM FILES\POLICYPAK\APPLICATION MANAGER\CLIENT\18.3.1649\PPWATCHERSVC64.EXE,7264,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\MCUI32.exe,792,Access Process Data,Unauthorized access blocked,1
23/08/2018 8:53:21 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:53:21 AM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\MCUI32.exe,792,Access Process Data,Unauthorized access blocked,
23/08/2018 8:52:39 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:52:39 AM,
C:\PROGRAM FILES\POLICYPAK\APPLICATION MANAGER\CLIENT\18.3.1649\PPWATCHERSVC64.EXE,7264,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\MCUI32.exe,15868,Access Process Data,Unauthorized access blocked,1
23/08/2018 8:52:39 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:52:39 AM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\MCUI32.exe,15868,Access Process Data,Unauthorized access blocked,
23/08/2018 8:52:36 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:52:36 AM,
C:\PROGRAM FILES\POLICYPAK\APPLICATION MANAGER\CLIENT\18.3.1649\PPWATCHERSVC64.EXE,7264,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\MCUI32.exe,11008,Access Process Data,Unauthorized access blocked,1
23/08/2018 8:52:36 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:52:36 AM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\MCUI32.exe,11008,Access Process Data,Unauthorized access blocked,
23/08/2018 8:52:21 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:52:21 AM,
C:\PROGRAM FILES\POLICYPAK\APPLICATION MANAGER\CLIENT\18.3.1649\PPWATCHERSVC64.EXE,7264,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\NortonSecurity.exe,6328,Access Process Data,Unauthorized access blocked,1
23/08/2018 8:51:41 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:51:41 AM,
C:\PROGRAM FILES\POLICYPAK\APPLICATION MANAGER\CLIENT\18.3.1649\PPWATCHERSVC64.EXE,7264,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\NortonSecurity.exe,6328,Access Process Data,Unauthorized access blocked,1
23/08/2018 8:51:23 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:51:23 AM,
C:\PROGRAM FILES\POLICYPAK\APPLICATION MANAGER\CLIENT\18.3.1649\PPWATCHERSVC64.EXE,7264,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\NortonSecurity.exe,6328,Access Process Data,Unauthorized access blocked,1
23/08/2018 8:51:03 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:51:03 AM,
C:\PROGRAM FILES\POLICYPAK\APPLICATION MANAGER\CLIENT\18.3.1649\PPWATCHERSVC64.EXE,7264,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\NortonSecurity.exe,6328,Access Process Data,Unauthorized access blocked,1
23/08/2018 8:49:18 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:49:18 AM,
C:\PROGRAM FILES\POLICYPAK\APPLICATION MANAGER\CLIENT\18.3.1649\PPWATCHERSVC64.EXE,7264,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\NortonSecurity.exe,6328,Access Process Data,Unauthorized access blocked,1
23/08/2018 8:49:17 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:49:17 AM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\coNatHst.exe,14492,Access Process Data,Unauthorized access blocked,
23/08/2018 8:49:07 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:49:07 AM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\NortonSecurity.exe,9028,Access Process Data,Unauthorized access blocked,
23/08/2018 8:37:09 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:37:09 AM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\symerr.exe,10336,Access Process Data,Unauthorized access blocked,
23/08/2018 8:19:02 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:19:02 AM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\NortonSecurity.exe,15272,Access Process Data,Unauthorized access blocked,
23/08/2018 8:06:48 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 8:06:48 AM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\symerr.exe,11352,Access Process Data,Unauthorized access blocked,
23/08/2018 7:49:00 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 7:49:00 AM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\NortonSecurity.exe,15412,Access Process Data,Unauthorized access blocked,
23/08/2018 7:42:00 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 7:42:00 AM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\symerr.exe,9492,Access Process Data,Unauthorized access blocked,
23/08/2018 7:36:48 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 7:36:48 AM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\symerr.exe,16796,Access Process Data,Unauthorized access blocked,
23/08/2018 7:18:56 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 7:18:56 AM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\NortonSecurity.exe,7092,Access Process Data,Unauthorized access blocked,
23/08/2018 7:06:47 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 7:06:47 AM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\symerr.exe,904,Access Process Data,Unauthorized access blocked,
23/08/2018 6:48:53 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 6:48:53 AM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\NortonSecurity.exe,14956,Access Process Data,Unauthorized access blocked,
23/08/2018 6:36:47 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 6:36:47 AM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\symerr.exe,10588,Access Process Data,Unauthorized access blocked,
23/08/2018 6:18:49 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 6:18:49 AM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\NortonSecurity.exe,7048,Access Process Data,Unauthorized access blocked,
23/08/2018 6:06:47 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 6:06:47 AM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\symerr.exe,14880,Access Process Data,Unauthorized access blocked,
23/08/2018 5:52:25 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 5:52:25 AM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\NortonSecurity.exe,4324,Access Process Data,Unauthorized access blocked,
23/08/2018 5:50:05 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 5:50:05 AM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\symerr.exe,15892,Access Process Data,Unauthorized access blocked,
23/08/2018 5:48:46 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 5:48:46 AM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\NortonSecurity.exe,4084,Access Process Data,Unauthorized access blocked,
23/08/2018 5:36:47 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 5:36:47 AM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\symerr.exe,15492,Access Process Data,Unauthorized access blocked,
23/08/2018 5:18:42 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 5:18:42 AM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\NortonSecurity.exe,7532,Access Process Data,Unauthorized access blocked,
23/08/2018 5:06:47 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 5:06:47 AM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\symerr.exe,13768,Access Process Data,Unauthorized access blocked,
23/08/2018 4:48:39 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 4:48:39 AM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\NortonSecurity.exe,12744,Access Process Data,Unauthorized access blocked,
23/08/2018 4:36:47 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 4:36:47 AM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\symerr.exe,7140,Access Process Data,Unauthorized access blocked,
23/08/2018 4:18:35 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 4:18:35 AM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\NortonSecurity.exe,11836,Access Process Data,Unauthorized access blocked,
23/08/2018 4:06:47 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 4:06:47 AM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\symerr.exe,16556,Access Process Data,Unauthorized access blocked,
23/08/2018 3:48:33 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 3:48:33 AM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\NortonSecurity.exe,14100,Access Process Data,Unauthorized access blocked,
23/08/2018 3:36:47 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 3:36:47 AM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\symerr.exe,10164,Access Process Data,Unauthorized access blocked,
23/08/2018 3:18:28 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 3:18:28 AM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\NortonSecurity.exe,10184,Access Process Data,Unauthorized access blocked,
23/08/2018 3:06:47 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 3:06:47 AM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\symerr.exe,9628,Access Process Data,Unauthorized access blocked,
23/08/2018 2:48:26 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 2:48:26 AM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\NortonSecurity.exe,72,Access Process Data,Unauthorized access blocked,
23/08/2018 2:36:47 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 2:36:47 AM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\symerr.exe,9688,Access Process Data,Unauthorized access blocked,
23/08/2018 2:18:21 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 2:18:21 AM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\NortonSecurity.exe,11380,Access Process Data,Unauthorized access blocked,
23/08/2018 2:06:47 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 2:06:47 AM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\symerr.exe,9376,Access Process Data,Unauthorized access blocked,
23/08/2018 1:50:05 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 1:50:05 AM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\symerr.exe,12208,Access Process Data,Unauthorized access blocked,
23/08/2018 1:48:19 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 1:48:19 AM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\NortonSecurity.exe,11852,Access Process Data,Unauthorized access blocked,
23/08/2018 1:36:47 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 1:36:47 AM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\symerr.exe,7980,Access Process Data,Unauthorized access blocked,
23/08/2018 1:18:14 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 1:18:14 AM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\NortonSecurity.exe,16896,Access Process Data,Unauthorized access blocked,
23/08/2018 1:06:47 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 1:06:47 AM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\symerr.exe,15912,Access Process Data,Unauthorized access blocked,
23/08/2018 12:48:10 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 12:48:10 AM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\NortonSecurity.exe,2860,Access Process Data,Unauthorized access blocked,
23/08/2018 12:36:47 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 12:36:47 AM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\symerr.exe,12196,Access Process Data,Unauthorized access blocked,
23/08/2018 12:18:08 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 12:18:08 AM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\NortonSecurity.exe,7236,Access Process Data,Unauthorized access blocked,
23/08/2018 12:06:07 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,23/08/2018 12:06:07 AM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\symerr.exe,9672,Access Process Data,Unauthorized access blocked,
22/08/2018 11:48:03 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 11:48:03 PM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\NortonSecurity.exe,10952,Access Process Data,Unauthorized access blocked,
22/08/2018 11:35:47 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 11:35:47 PM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\symerr.exe,14280,Access Process Data,Unauthorized access blocked,
22/08/2018 11:18:01 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 11:18:01 PM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\NortonSecurity.exe,14904,Access Process Data,Unauthorized access blocked,
22/08/2018 11:05:47 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 11:05:47 PM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\symerr.exe,7436,Access Process Data,Unauthorized access blocked,
22/08/2018 10:47:57 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 10:47:57 PM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\NortonSecurity.exe,6852,Access Process Data,Unauthorized access blocked,
22/08/2018 10:35:47 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 10:35:47 PM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\symerr.exe,2244,Access Process Data,Unauthorized access blocked,
22/08/2018 10:17:52 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 10:17:52 PM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\NortonSecurity.exe,14660,Access Process Data,Unauthorized access blocked,
22/08/2018 10:05:47 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 10:05:47 PM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\symerr.exe,16528,Access Process Data,Unauthorized access blocked,
22/08/2018 9:50:05 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 9:50:05 PM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\symerr.exe,9084,Access Process Data,Unauthorized access blocked,
22/08/2018 9:48:43 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 9:48:43 PM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\NortonSecurity.exe,4324,Access Process Data,Unauthorized access blocked,
22/08/2018 9:47:47 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 9:47:47 PM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\NortonSecurity.exe,17392,Access Process Data,Unauthorized access blocked,
22/08/2018 9:35:47 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 9:35:47 PM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\symerr.exe,8448,Access Process Data,Unauthorized access blocked,
22/08/2018 9:17:45 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 9:17:45 PM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\NortonSecurity.exe,8544,Access Process Data,Unauthorized access blocked,
22/08/2018 9:05:47 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 9:05:47 PM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\symerr.exe,17152,Access Process Data,Unauthorized access blocked,
22/08/2018 8:47:42 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 8:47:42 PM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\NortonSecurity.exe,15880,Access Process Data,Unauthorized access blocked,
22/08/2018 8:35:47 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 8:35:47 PM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\symerr.exe,9168,Access Process Data,Unauthorized access blocked,
22/08/2018 8:17:40 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 8:17:40 PM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\NortonSecurity.exe,14400,Access Process Data,Unauthorized access blocked,
22/08/2018 8:05:47 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 8:05:47 PM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\symerr.exe,15832,Access Process Data,Unauthorized access blocked,
22/08/2018 7:47:38 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 7:47:38 PM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\NortonSecurity.exe,15592,Access Process Data,Unauthorized access blocked,
22/08/2018 7:35:47 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 7:35:47 PM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\symerr.exe,12948,Access Process Data,Unauthorized access blocked,
22/08/2018 7:17:35 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,22/08/2018 7:17:35 PM,
C:\PROGRAM FILES\POLICYPAK\CORE\PPEXTENSIONSERVICE.EXE,4424,
C:\Program Files\Symantec.cloud\EndpointProtectionAgent\Engine\22.14.2.13\NortonSecurity.exe,3892,Access Process Data,Unauthorized access blocked,

Back