6 Replies Latest reply on Aug 11, 2016 10:08 AM by arnieos

    Rule to monitor disabled McAfee AV


      Does anyone know what event I will need to use to monitor and alert on systems with disabled McAfee AV? I currently have McAfee ePo sending logs to ESM but can't find a rule that will work. Thanks!