CredGuard False Positive?: Realtek HD Audio Universal Service

Question

Hi all, 
 I got the following event in the Central Endpoint Protection today, it seems to me a false positive. Anyone other also? 
 We prevented credential theft in Realtek HD Audio Universal Service 
 Mitigation CredGuard
Application C:\Windows\System32\RtkAudUService64.exe
Description Realtek HD Audio Universal Service 1.0

Shweta · Answer

Hi JosefBergmann 
 If you are aware of the application and the possibility of it accessing the LSASS process, it can be deemed as a False Positive. However if you are not sure about the application, please check this article for reference.