Process Guard Module

The Process Guard Module for FireEye Endpoint Security prevents attackers from obtaining access to credential data or key material stored within the Windows Local Security Subsystem Service (LSASS) process, thus protecting endpoints against common credential theft attacks. 

Process Guard takes preventative actions on all processes by default, and this could impact any legitimate application to not function as expected. There is a whitelisting feature that allows admins to bypass the preventative actions of Process Guard by specifying a full process path as excluded process. This alleviates any issues with incompatible legitimate applications that require full system access to perform normal operations. 

This general availability release of Process Guard is supported on Endpoint Security 5.0 with xAgent v32.30.10 (v32MR)

Note: Process Guard 1.4.1 will NOT work on Endpoint Security 4.9.x and xAgent v32.30.0 or lower