ESET Protect : Try to extract log for HIPS but blocked by ESET itself

[eti 0]

Hello !

I need to extract the logs on the ESET console, if I go to a computer via the web console, we have a section called: Log->Diagnostic Log->HIPS Log. When I try to extract, which can take a few hours: ESET blocks it! Here is the message:

 

Feb 17, 2022 09:02:20 AM Blocked C:\Windows\System32\csrss.exe Gain access to another application Self-defense: protection of ekrn and egui processes

[Marcos 5,259]

Please clarify what you mean by extracting logs and what operation takes hours. Also enclose information about the HIPS-related issue that you are attempting to solve by enabling diagnostic logging.

Normally you should get something like this within a couple of minutes after enabling advanced logging provided that Self-defense actually blocked certain operations:

 

As for the record "Blocked C:\Windows\System32\csrss.exe Gain access to another application Self-defense: protection of ekrn and egui processes", this should be ok and should not cause any issues.

[eti 0]

Thanks Marcos, in the meantime my issues was resolved !