Jump to content
Uncluesteve

Watchgurad TRD Quarantines ESET RAW Files

Recommended Posts

I am looking to see if any one that is using Eset Endpoint Security is also using a Watchguard Firewall appliance that has enabled WatchGuard's Threat Detection & Response tool. 

I have just stared to play around with the settings and I noticed that Watchguard quarantines .raw files in the folder C:\Program Files\ESET\ESET Security\Modules.  Does anyone know what these files are and how eset uses them?

Here is a link to the Watchguard TDR datasheet. 

https://www.watchguard.com/wgrd-products/security-services/threat-detection-and-response

Annotation 2020-07-30 094026.jpg

Share this post


Link to post
Share on other sites

It's a false positive. Those are update files necessary to assemble modules during compilation.

Share this post


Link to post
Share on other sites

Thanks for the quick response.  So if they are update files is there an process that they get cleaned up over time or are the accumulative?

Share this post


Link to post
Share on other sites

By the way, we have our own EDR solution ESET Enterprise Inspector which leverages our products as well as LiveGrid, machine-learning and other technologies to provide CISO or administrators with insight into suspicious operations that occur in the network and allow for manual or automatic remediation. We currently provide 418 pre-defined rules that trigger on suspicious operations with an option to create new rules by an admin.

image.png

image.png

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...