When I terminate both PanGPS and PanGPA, this is the process that goes on before they both start back up. I also have the Service disabled this entire transaction. I found the " HKLM\SOFTWARE\Palo Alto Networks\GlobalProtect\PanGPS\RestartPanGPA" one particularly interesting. Time of Day Process Name PID Operation Path Result Detail 25:33.0 PanGPS.exe 15796 QueryDirectory C:\Program Files\Palo Alto Networks\GlobalProtect\PanGPS.log SUCCESS Filter: PanGPS.log, 1: PanGPS.log 25:33.0 PanGPS.exe 15796 CreateFile C:\Program Files\Palo Alto Networks\GlobalProtect\PanGPS.log SUCCESS Desired Access: Generic Write, Read Attributes, Disposition: OpenIf, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: None, AllocationSize: 0, OpenResult: Opened 25:33.0 PanGPS.exe 15796 QueryStandardInformationFile C:\Program Files\Palo Alto Networks\GlobalProtect\PanGPS.log SUCCESS AllocationSize: 434,176, EndOfFile: 430,591, NumberOfLinks: 1, DeletePending: False, Directory: False 25:33.0 PanGPS.exe 15796 QueryStandardInformationFile C:\Program Files\Palo Alto Networks\GlobalProtect\PanGPS.log SUCCESS AllocationSize: 434,176, EndOfFile: 430,591, NumberOfLinks: 1, DeletePending: False, Directory: False 25:33.0 PanGPS.exe 15796 WriteFile C:\Program Files\Palo Alto Networks\GlobalProtect\PanGPS.log SUCCESS Offset: 430,591, Length: 435, Priority: Normal 25:33.0 PanGPS.exe 15796 QueryBasicInformationFile C:\Program Files\Palo Alto Networks\GlobalProtect\PanGPS.log SUCCESS CreationTime: 10/25/2018 8:12:34 AM, LastAccessTime: 10/25/2018 8:12:34 AM, LastWriteTime: 10/25/2018 11:22:10 AM, ChangeTime: 10/25/2018 11:22:10 AM, FileAttributes: A 25:33.0 PanGPS.exe 15796 ReadFile C:\Program Files\Palo Alto Networks\GlobalProtect\PanGPS.log SUCCESS Offset: 0, Length: 64 25:33.0 PanGPS.exe 15796 ReadFile C:\Program Files\Palo Alto Networks\GlobalProtect\PanGPS.log SUCCESS Offset: 0, Length: 7 25:33.0 PanGPS.exe 15796 CloseFile C:\Program Files\Palo Alto Networks\GlobalProtect\PanGPS.log SUCCESS 25:37.1 PanGPS.exe 15796 RegOpenKey HKLM\Software\Palo Alto Networks\GlobalProtect\PanGPS SUCCESS Desired Access: Read 25:37.1 PanGPS.exe 15796 RegQueryValue HKLM\SOFTWARE\Palo Alto Networks\GlobalProtect\PanGPS\RestartPanGPA NAME NOT FOUND Length: 16 25:37.1 PanGPS.exe 15796 RegCloseKey HKLM\SOFTWARE\Palo Alto Networks\GlobalProtect\PanGPS SUCCESS 25:37.3 PanGPA.exe 8516 RegSetValue HKCU\Software\Palo Alto Networks\GlobalProtect\PanMSAgent\PanGPS SUCCESS Type: REG_DWORD, Length: 4, Data: 5 25:37.3 PanGPA.exe 8516 RegQueryValue HKCU\Software\Palo Alto Networks\GlobalProtect\PanMSAgent\PanGPS SUCCESS Type: REG_DWORD, Length: 4, Data: 5 25:38.0 PanGPS.exe 15796 QueryDirectory C:\Program Files\Palo Alto Networks\GlobalProtect\PanGPS.log SUCCESS Filter: PanGPS.log, 1: PanGPS.log 25:38.0 PanGPS.exe 15796 CreateFile C:\Program Files\Palo Alto Networks\GlobalProtect\PanGPS.log SUCCESS Desired Access: Generic Write, Read Attributes, Disposition: OpenIf, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: None, AllocationSize: 0, OpenResult: Opened 25:38.0 PanGPS.exe 15796 QueryStandardInformationFile C:\Program Files\Palo Alto Networks\GlobalProtect\PanGPS.log SUCCESS AllocationSize: 434,176, EndOfFile: 431,026, NumberOfLinks: 1, DeletePending: False, Directory: False 25:38.0 PanGPS.exe 15796 QueryStandardInformationFile C:\Program Files\Palo Alto Networks\GlobalProtect\PanGPS.log SUCCESS AllocationSize: 434,176, EndOfFile: 431,026, NumberOfLinks: 1, DeletePending: False, Directory: False 25:38.0 PanGPS.exe 15796 WriteFile C:\Program Files\Palo Alto Networks\GlobalProtect\PanGPS.log SUCCESS Offset: 431,026, Length: 862, Priority: Normal 25:38.0 PanGPS.exe 15796 QueryBasicInformationFile C:\Program Files\Palo Alto Networks\GlobalProtect\PanGPS.log SUCCESS CreationTime: 10/25/2018 8:12:34 AM, LastAccessTime: 10/25/2018 8:12:34 AM, LastWriteTime: 10/25/2018 11:25:33 AM, ChangeTime: 10/25/2018 11:25:33 AM, FileAttributes: A 25:38.0 PanGPS.exe 15796 ReadFile C:\Program Files\Palo Alto Networks\GlobalProtect\PanGPS.log SUCCESS Offset: 0, Length: 64 25:38.0 PanGPS.exe 15796 ReadFile C:\Program Files\Palo Alto Networks\GlobalProtect\PanGPS.log SUCCESS Offset: 0, Length: 7 25:38.0 PanGPS.exe 15796 CloseFile C:\Program Files\Palo Alto Networks\GlobalProtect\PanGPS.log SUCCESS
... View more