itm4n-PrivescCheck/data/EndpointProtectionSignatures.csv

1	Name	Signature
2	AMSI	amsi.dll
3	AppSense	emcoreservice,emsystem,watchdogagent
4	Avast	avast
5	Avecto Defendpoint	avecto,defendpoint,pgeposervice,pgsystemtray,privilegeguard
6	Carbon Black	carbon,cb.exe,logrhythm
7	Cisco AMP	ciscoamp
8	CounterTack	countertack
9	CrowdStrike	crowdstrike,csagent,csfalcon,csshell,windowssensor
10	Cybereason	activeconsole,cramtray,crssvc,cybereason
11	Cylance	cylance,cyoptics,cyupdate
12	Elastic	elastic-endpoint,elasticendpoint
13	Endgame	endgame
14	ESET Endpoint Inspector	inspector
15	eTrust EZ AV	groundling
16	FireEye	fireeye,mandiant,xagt
17	ForeScout	forescout,secureconnector
18	IBM QRadar	qradar,wincollect
19	Ivanti	ivanti
20	Kaspersky	kaspersky
21	Lacuna	lacuna
22	McAfee	mcafee
23	Microsoft Defender for Endpoint	sensendr,sensetvm
24	Morphisec	morphisec
25	Program Protector	protectorservice
26	Red Canary	canary
27	Red Cloak	procwall,redcloak,cyclorama
28	SentinelOne	sentinel
29	Sophos	sophos
30	Symantec Endpoint Protection	eectrl,semlaunchsvc,sepliveupdate,sisidsservice,sisipsservice,sisipsutil,smc.exe,smcgui,snac64,srtsp,symantec,symcorpui,symefasi
31	Sysinternals Antivirus	sysinternal
32	Sysinternals Sysmon	sysmon
33	Tanium Enforce	tanium,tpython
34	Traps	cyvera,cyserver,cytray,PaloAltoNetworks,tda.exe,tdawork
35	Trend Micro	ntrtscan,tmlisten,tmbmsrv,tmssclient,tmccsf,trend
36	Windows Defender	defender,msascuil,msmpeng,nissrv,securityhealthservice