Triggering SelfProtection event

[jmcg]

Hello,

Looking to trigger a selfprotection event.

Logging event on seftprotection is enable.

I have try to shutdown using taskkill any McAfee process (zero event)

I have try to edit folder/file of ENS (zero event)

I have try to edit/replace registery using regedit (zero event)

Do you have any idea how can I force trigger those events ? thx.

[hitesh_Reddy · Accepted solution]

Hello
I just wanted to clarify a piece of information before taking it further, I believe all these 3 actions performed were blocked as per the ENS common policy, please correct me on this.

That being said, could you please check the Severity level set under the ENS common policy to trigger events and confirm if they are set to "All" since these are informational events, if not if you could try changing it to "All" and then see if the events get generated.