OCSInventory McAfee antivirus

Question

The access to the log folder of McAfee antivirus has been detected, in which OCSInventory is requesting access to 'change permissions, delete' in the McAfee\Endpoint Security\Logs folder. Why does it do that? What does the inventory process need these permissions for?

Answer 1

Hello @isabel.pena,

can you provide details on the version of Windows and OCS agent ?

Is the OCS agent run manually or automatically by the service ?

If you add an exclusion of the C:\Program Files (x86)\OCS Inventory Agent\ folder in McAfee antivirus, does the problem persist ?