Target: c:\Program FIles (x86)\SYmantec\Symantec Endpoint Protection\12.1.4100.4126.105\Bin\ProtectionUtilSurrogate.exe Action Taken : Blocked
Any thoughts about this issue? What is the best practice in this case?
Thanks in advance!
Is it symantec tamper protection alert ?
How to Create Exceptions or Exclusions for Tamper Protection Alerts that have already been logged
https://support.symantec.com/en_US/article.TECH92553.html
To be honest, for tamper protection alerts, you can leave this be. There should be no issues caused by this. For some reason that process is touching a SEP process and is being stopped. It should still function as expected though.