cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Who rated this post

PAN GP HIP

L0 Member

This is messing up our EDR solution. 

 

This program will run cmd.exe and then whoami /groups

C:\Program Files\Palo Alto Networks\GlobalProtect\PanGpHip.exe

 

Whoami as the Local System authority is a bad thing in our EDR world. Is there anyway to change this behaviour?

 

 

Who rated this post