Millions of Threat Events The object was not scanned due to a sharing violation

[ffigueroag]

Hello, I have over 16 Millions of Threat Events about Event Description: "The object was not scanned due to a sharing violation" and I try to understand that alert or if it can manage or modify to get best results. Anyone know if there are any best practice or recommendation to???

[yaz]

Hi @ffigueroag 

Thank you for reaching out McAfee Community. 

The event you see may be caused due to multiple reasons. 

Can you share us the exact details you see on the logs?

It would be helpful for further analysis. 

Was my reply helpful?

If yes, please give me a Kudo.

If I have answered your query, kindly mark this as solution so that we help other community members together. 

[ffigueroag]

Hi @yaz 

Thanks for quick response, of course let me share some specific information.

Let me know if this works for you

Threat Event Log: Information
Server ID: BCEPO
Event Received Time: 1/20/22 11:00:52 PM BOT
Event Generated Time: 1/20/22 11:00:08 PM BOT
Preferred Event Time: 1/20/22 11:00:08 PM AMT
Agent GUID: 847DF2F2-
Detecting Prod ID (deprecated): ENDP_AM_1070
Detecting Product Name: McAfee Endpoint Security
Detecting Product Version: 10.7
Detecting Product Host Name: fjpsa1
Detecting Product IPv4 Address: 192.
Detecting Product IP address: 192.
Detecting Product MAC Address: 00505
DAT Version: 4685.0
Engine Version: 4685.0
Threat Source Host Name:
Threat Source IPv4 Address: 192.
Threat Source IP address: 192.
Threat Source MAC Address:
Threat Source User Name:
Threat Source Process Name:
Threat Source URL:
Threat Target Host Name:
Threat Target IPv4 Address: 192.
Threat Target IP address: 192.
Threat Target MAC Address:
Threat Target User Name:
Threat Target Port Number:
Threat Target Network Protocol:
Threat Target Process Name:
Threat Target File Path: C:\Windows\appcompat\Programs\Amcache.hve.LOG2
Event Category: Operational
Event ID: 34924
Threat Severity: Information
Threat Name: Unknown
Threat Type: Threat Type not available
Action Taken: True
Threat Handled: False
Analyzer Detection Method: Full Scan
Events received from managed systems
Event Description: The object was not scanned due to a sharing violation

[yaz · Accepted solution]

Hi @ffigueroag 

Thanks for providing us with details. 

This reported issue seems like the one below. 

https://community.mcafee.com/t5/Endpoint-Security-ENS/sharing-violation/td-p/602319

This looks like expected behavior. 

Was my reply helpful?

If Yes, please give me a Kudo. 

If I have answered your query, Kindly mark this as solution so that together we help other community members.