Hello everyone,
Is anyone else getting "High-Risk" detections "WIN-INI-PRC-VEEAM-BACKUP-SUSP-CHILD-PROCESS-1" from Veeam Backup and Replication?
Parent Command Line: "C:\Program Files\Veeam\Backup and Replication\Backup\Veeam.Backup.Service.exe"
Process Owner: SISTEMA
Signer Info: Veeam Software Group GmbH
Sophos Process ID: 20816:133718331003397117
File Path: C:\Program Files\Veeam\Backup and Replication\Backup\Veeam.Backup.Satellite.exe
Command Line: "C:\Program Files\Veeam\Backup and Replication\Backup\Veeam.Backup.Satellite.exe" "TBKWINBK_server.admin1_PowerShell_TBKWINBK_1507cc51-63c0-4f4e-8622-cc5bc1dc0b66"
This is the first time I have seen this detection. Veeam Backup and Replication has been installed on the server for a long time.
Edit tags
[edited by: GlennSen at 3:20 PM (GMT -7) on 3 Oct 2024]
