Winstep

Software Technologies


 Winstep Forums


Print view
Board index : Winstep Forums : General Discussion  [ 2 posts ]
Author Message
 Post subject: Cisco AMP blocks process
PostPosted: Mon Nov 02, 2020 10:35 am 
Offline

Joined: Tue Dec 31, 2019 11:26 pm
Posts: 11
I`ve just reinstalled Nexus Ultimate on my work laptop, i.e. a machine over which I have limited control. When I install it I get this message:

"System Process Protection was triggered by WsxService.exe (PID 11552) attempting to access lsass.exe (PID 420). The action was blocked."

It appears to run without issues after that, and IT haven`t contacted me with any concerns, but I thought I`d raise it here in case there`s anything that can be done.


Back to top
 Profile  
 
 Post subject: Re: Cisco AMP blocks process
PostPosted: Mon Nov 02, 2020 11:00 am 
Offline
Site Admin
Site Admin
User avatar

Joined: Thu Feb 26, 2004 8:30 pm
Posts: 11930
WsxService.exe is the service used by the main Winstep application(s) to do ANYTHING that requires admin rights to perform (e.g.; install theme fonts, sync the system clock with internet time servers, obtain cpu and memory usage information on high privilege processes so it can be displayed by the CPU and RAM modules, etc...)

By delegating these functions to an external service, the main application doesn't need to run with high privileges, which - and this time rightfully so - would be a MAJOR security catastrophe, as anything launched from a high privilege application will itself run with high privileges (imagine launching a browser session with admin privileges, fastest way to get your system p0wned, iykes, eheh).

So, if WsxService is blocked by Cisco Amp the Winstep application might not be able to do any of the things listed above that require admin privileges.

_________________
Jorge Coelho
Winstep Xtreme - Xtreme Power!
http://www.winstep.net - Winstep Software Technologies


Back to top
 Profile WWW 
 
Post new topic Reply to topic Board index : Winstep Forums : General Discussion  [ 2 posts ]
Display posts from previous:  Sort by  

Who is online

Users browsing this forum: Google [Bot] and 54 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
cron