|
Process
|
Description
|
TmListen.exe |
Receives commands and notifications from the Apex One server and facilitates
communication from the Security Agent to the server
|
NTRtScan.exe |
Performs Real-time, Scheduled, and Manual Scan on Security Agents
|
TmPfw.exe |
Provides packet level firewall, network virus scanning, and intrusion
detection capabilities
|
TMBMSRV.exe |
Regulates access to external storage devices and prevents unauthorized
changes to registry keys and processes
|
DSAgent.exe |
Monitors the transmission of sensitive data and controls access to
devices
|
PccNTMon.exe |
This process is responsible for starting the Security Agent
console
|
TmCCSF.exe |
Performs Browser Exploit Prevention and memory scanning
|
The Security Agent can also protect against the addition of processes in the
Microsoft Software Restriction Policies (SRP). Software Restriction Policies prevent
the listed
applications from running on the endpoint. To prevent the addition of Security Agent processes in
the Software Restriction Policies list:
-
Enable Protect Security Agent processes.
-
Enable the Unauthorized Change Prevention Service.