Interoperability with BitDefender
Description
To learn how to exclude files and folders please see Capture Client Interoperability Issues with Third Party Applications.
Resolution
Items to exclude:
BitDefender works with temporary files in a bdcore_tmp directory that it creates in C:\Windows\Temp. It is unsafe to exclude this \Temp. We can create acceptable exclusions with wildcards.
Exclusions in Capture Client to stop alerts on BitDefender files:
\Device\HarddiskVolume*\WINDOWS\Temp\bdcore_tmp\*\tmp*\tmp*
C:\WINDOWS\Temp\bdcore_tmp\*\tmp*\tmp*
To exclude Capture Client from BitDefender:
Exclude these folders and the update file:
C:\Program Files\SentinelOne
C:\ProgramData\Sentinel
C:\Documents and Settings\All Users\Application Data\Sentinel (ProgramData for 2003 and legacy agents )
C:\Windows\Temp\SentinelInstaller.exe
Note: Make sure to exclude subfolders. Some solutions automatically exclude subfolders, but others require explicit notation.
Exclude the SentinelOne Agent kernel-mode driver, service, and dynamic library:
Kernel-Mode driver: SentinelMonitor.sys
Windows Service: SentinelAgent.exe
32-bit DLL: InProcessClient32.dll
64-bit DLL: InProcessClient64.dll