Sangfor Community»Categories Cyber Security Athena Endpoint Protection Platform (EPP) Suspicious activity of SFEAssetCollect

Suspicious activity of SFEAssetCollect

views: 1303 | comments: 1 | added to Favorites 0
Lights on | 提示:支持键盘翻页<-左 右->
    组图打开中,请稍候......
Created: 2026-Apr-15 12:08

Summary:

The proccess SFEAssetCollect.exe enumerate all local accounts and attempt to change the password everyday, around the time install EDR agent. Can we disable it? Thanks

Reply

Sangfor Jojo Posted 2026-Apr-22 14:58
The SFEAssetCollect process is the endpoint information collection process of Endpoint Secure. It is responsible for gathering endpoint information and, as of version 6.0.2, it may generate core files in case of exceptions. There is no information indicating that this process can be disabled. Therefore, disabling SFEAssetCollect is not supported.
—— answered by Sangfor Solvia