Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feature request]: Adding Checkpoint AV Solution #386

Open
BalintOberrauch opened this issue Jan 25, 2024 · 0 comments
Open

[Feature request]: Adding Checkpoint AV Solution #386

BalintOberrauch opened this issue Jan 25, 2024 · 0 comments

Comments

@BalintOberrauch
Copy link

Is your feature request related to a problem? Please describe.

no

Describe the solution you'd like

Several customers are using Checkpoint as an AV Solution. Full Scan and Signature Updates can be done via the following command:

64-Bit: Start-Process -FilePath "C:\Program Files (x86)\CheckPoint\Endpoint Security\Anti-Malware\epam_cli.exe" -ArgumentList "/av", "/scan" -NoNewWindow -Wait

32-Bit: Start-Process -FilePath "C:\Program Files\CheckPoint\Endpoint Security\Anti-Malware\epam_cli.exe" -ArgumentList "/av", "/scan" -NoNewWindow -Wait

The following services are present:

Name : Check Point Bitlocker Management
DisplayName : Check Point Endpoint Security Bitlocker Management
Status : Running
DependentServices : {}
ServicesDependedOn : {}
CanPauseAndContinue : False
CanShutdown : False
CanStop : False
ServiceType : Win32OwnProcess

Name : Check Point Device Auxiliary Framework
DisplayName : Check Point Device Auxiliary Framework
Status : Running
DependentServices : {}
ServicesDependedOn : {RpcSs}
CanPauseAndContinue : False
CanShutdown : False
CanStop : False
ServiceType : Win32OwnProcess

Name : CPCompliance
DisplayName : Check Point Endpoint Security Compliance
Status : Running
DependentServices : {}
ServicesDependedOn : {}
CanPauseAndContinue : False
CanShutdown : True
CanStop : False
ServiceType : Win32OwnProcess

Name : CPDA
DisplayName : Check Point Endpoint Agent
Status : Running
DependentServices : {}
ServicesDependedOn : {}
CanPauseAndContinue : False
CanShutdown : False
CanStop : False
ServiceType : Win32OwnProcess

Name : CPEFR
DisplayName : Check Point Endpoint EFR
Status : Running
DependentServices : {}
ServicesDependedOn : {epnetflt, CPEPMon, cpbak, epregflt}
CanPauseAndContinue : False
CanShutdown : False
CanStop : False
ServiceType : Win32OwnProcess

Name : DisknetClient
DisplayName : Check Point ESME Client
Status : Running
DependentServices : {}
ServicesDependedOn : {}
CanPauseAndContinue : False
CanShutdown : True
CanStop : False
ServiceType : Win32OwnProcess

Name : EpabService
DisplayName : Check Point Endpoint Security AntiBot
Status : Running
DependentServices : {}
ServicesDependedOn : {epnetflt}
CanPauseAndContinue : False
CanShutdown : True
CanStop : False
ServiceType : Win32OwnProcess

Name : EpamService
DisplayName : Check Point Endpoint Security Anti-Malware
Status : Running
DependentServices : {}
ServicesDependedOn : {}
CanPauseAndContinue : False
CanShutdown : True
CanStop : False
ServiceType : Win32OwnProcess

Name : EPClientUIService
DisplayName : Check Point Endpoint Security Client UI
Status : Running
DependentServices : {}
ServicesDependedOn : {RpcSs}
CanPauseAndContinue : False
CanShutdown : True
CanStop : True
ServiceType : Win32OwnProcess

Name : EPWD
DisplayName : Check Point Endpoint Client Watchdog
Status : Running
DependentServices : {}
ServicesDependedOn : {}
CanPauseAndContinue : False
CanShutdown : False
CanStop : False
ServiceType : Win32OwnProcess

Name : Full Disk Encryption
DisplayName : Check Point Full Disk Encryption
Status : Stopped
DependentServices : {}
ServicesDependedOn : {}
CanPauseAndContinue : False
CanShutdown : False
CanStop : False
ServiceType : Win32OwnProcess

Name : RemediationService
DisplayName : Check Point Endpoint Remediation
Status : Running
DependentServices : {}
ServicesDependedOn : {}
CanPauseAndContinue : False
CanShutdown : True
CanStop : False
ServiceType : Win32OwnProcess

Name : TESvc
DisplayName : Check Point Endpoint Threat Emulation
Status : Running
DependentServices : {}
ServicesDependedOn : {}
CanPauseAndContinue : False
CanShutdown : True
CanStop : False
ServiceType : Win32OwnProcess

Name : vsmon
DisplayName : Check Point Endpoint Security Network Protection
Status : Running
DependentServices : {}
ServicesDependedOn : {Afd, RpcSs, CryptSvc, BFE}
CanPauseAndContinue : False
CanShutdown : True
CanStop : False
ServiceType : Win32OwnProcess

Describe alternatives you've considered

see above

Screenshots

No response

Additional context

No response

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant