Known Issue: Palo Alto’s Cortex XDR Marking ThreatLockerService.exe as a Malicious Threat

1 min. readlast update: 11.21.2024

(11/21/2024)

There has been a reported issue regarding Palo Alto’s Cortex XDR marking the ThreatLockerService.exe as a malicious threat due to credential sniffing. This is due to our Elevation product as the ThreatLockerService.exe makes changes within the Windows registry to have our custom UAC prompt function properly. 

 

Should you encounter this, we recommend that you add our exclusions for ThreatLocker to ensure that our services are not blocked from protecting your endpoints. 

Working with Your Existing Antivirus | ThreatLocker Help Center 

Was this article helpful?