topic Re: harmony endpoint issue files in Endpoint

harmony endpoint issue files

Kasuchuli — Mon, 03 Jul 2023 15:45:47 GMT

Hi!
Im having problems with these files:

We used to find them in "Documents Folder" but now they are on the desktop folder as "hiden files".

Is there a way to change the location of the files?

Regards.

Re: harmony endpoint issue files

ICSI — Mon, 03 Jul 2023 19:19:03 GMT

as far as I understand, those files are there to trick any ransomware attack. The harmony endpoint service monitors those files and if they get deleted, renamed etc means something is going on in your computer.

What is the problem with them?

Re: harmony endpoint issue files

Kasuchuli — Mon, 03 Jul 2023 19:36:29 GMT

Thank you for answering.

To be more precise i wanted to know if the file can be properly moved to a new location.
Now they are in desktop folder as "hiden files" and i want them to be in "Documents Folder", where they used to be located in previous versions.

Regards.

Re: harmony endpoint issue files

PhoneBoy — Mon, 03 Jul 2023 20:26:15 GMT

That must be new behavior.
The documentation doesn't mention the Desktop folder here: https://sc1.checkpoint.com/documents/R81.20/SmartEndpoint_OLH/EN/Content/Topics-EPSG-R81.20/Anti-Ransomware-Files.htm?tocpath=Harmony%20Endpoint%20Anti-Ransomware%252C%20Behavioral%20Guard%20and%20Forensics%7C_____1
Unfortunately, it doesn't appear there is a way to configure what folders are used.

Re: harmony endpoint issue files

Kasuchuli — Mon, 03 Jul 2023 20:59:14 GMT

Thank you so much!

Now i have a clear understanding how these honewpot files work.

Regards.