I can uninstall cortex xdr 8.2 agente in safe mode without password

[sebasnova]

hi

i'm having penetretion testings, and they can uninstall cortex xdr 8.2 agente in safe mode on windows 10, i have the anti-tampering protection enabled, and a password for uninstall.

I understand that this was imposible in the version 8.2 or later

so my question is, why could they do it?

[aspatil]

Hello @sebasnova ,

Would suggest you to open a TAC case or involve your CSAM to showcase the scenario. It will help us to look into the issue and provide the appropriate remediation.

If you feel this has answered your query, please let us know by clicking on "mark this as a Solution". Thank you.