cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Who rated this post

PAN GP HIP

L0 Member

This is messing up our EDR solution. 

 

This program will run cmd.exe and then whoami /groups

C:\Program Files\Palo Alto Networks\GlobalProtect\PanGpHip.exe

 

Whoami as the Local System authority is a bad thing in our EDR world. Is there anyway to change this behaviour?

 

 

Who rated this post