Endpoint Protection

Hi,

Is our SEP doing the Registry scan in every time while schedule scan as well as manually?

If so then how we will get the log for the same?

HI,

Check this artical may be help

Information on Symantec Endpoint Protection Scans

https://www-secure.symantec.com/connect/articles/information-symantec-endpoint-protection-scans

You can find it in the Scan log on the client

In the SEPM, go to Monitors >> Logs and set the log to show Scan

Check this thread

https://www-secure.symantec.com/connect/forums/when-did-full-scheduled-scan-end

Hi Ashish,

Thanks to response but if I enable to client debug log for scanning I can see the all the file which had been scanned by SEP but I could not see any registry Entry which has been Scan on it.

Try Process Monitor, it should show the registry events:

How to Configure Sysinternals' Process Monitor to Record Symantec's Auto-Protect Events

http://www.symantec.com/business/support/index?page=content&id=TECH98079

Thanks Brian81,

But if our SEP scan the registry of System then there must be some evidence that we can enable through SEP End Also?

Can you please suggest.

yet this is not close.

can any one suggest on this?

enable vpdebug and check for the files that are scanned

http://www.symantec.com/business/support/index?page=content&id=TECH102939&locale=en_US

Hi Pete_4u2002,

I already did this and I have not found any entry of registry.