Eric Patterson wrote:
I know that recently we have made some changes to our AV. I do have another member of our staff looking into that. I did check Windows Defender to make sure that the ICMP traffic is allowed and also made sure the RPC correction has been run. The odd thing is this is occurring on new and previously scanned machines. And, with Windows 10 and 11 OS.
I may need to look into the AV exceptions that need to be checked more deeply. It's possible SentinelOne needs to be set differently than our previous AV did.