Data Center Security

While tracking down an unrelated issue, I happen to look at the list of processes that should not start (Global Options > General > Global Poliy Lists) and I noticed that every entry has a Signature Flag of 'Q01'.  Does anyone have an idea of why this flag is present?  It seems to be some kind of bogus entry.  If, for example, I try to launch fpt.exe, I will never see the Q01 flag in the event details.  The net effect is that none of these processes will be stopped without altering the list.  The bogus flag ensures a match will never happen.

Thoughts?

Will

Will,

I run into this KB from Symantec, it seems to be an open issue:

https://support.symantec.com/en_US/article.TECH215302.html

Regards

Miguel

Thanks MIguel,

I'll keep an eye on that KB.

Will