I see that a process, C:\program files\endgame\esensor.exe , is apparently trying to write to several files in the C:\Solidcore folder. One such example:
Description McAfee Application Control prevented an attempt to modify this filebecause this file is whitelisted. To make changes to whitelisted files, define a policy with the relevant rules.
Event Display Name File Write Denied
Event File Name C:\Solidcore\evt_mcpl_cache_file.tmp
Event Name WRITE_DENIED
Generated by an Updater No
Generated in an Update Window No
Performed By NT AUTHORITY\SYSTEM
Process ID 4308
Process Name C:\program files\endgame\esensor.exe
In this scenario, would it be wise to skiplist -s C:\Solidcore and include the specific path for each write deny? The other files being write denied are:
C:\Solidcore\scinv.tmp
C:\Solidcore\scinvlog