The agent self-protection feature prevents other programs and even the user from modifying or deleting files that the Security Agent uses.
When you enable Protect files used by the agent and the Security Agent is running on an endpoint, Apex One (Mac) locks the following files and folders:
-
/Library/Application Support/TrendMicro/common
-
/Library/Application Support/TrendMicro/Kext
-
/Library/Application Support/TrendMicro/TmccMac
-
/Library/Application Support/TrendMicro/TmccUpdate
-
/Library/Application Support/TrendMicro/Plug-in
-
/Library/Application Support/TrendMicro/Tools
-
/Library/LaunchDaemons/com.trendmicro.icore.*
-
/Library/LaunchDaemons/com.trendmicro.tmsm.plugin.plist
-
/Library/LaunchDaemons/com.trendmicro.tmsm.launcher.plist
-
/Application/TrendMicroSecurity.app
Apex One (Mac) allows files to be added in the /Library/Application Support/TrendMicro/Tools folder, files cannot be deleted from the folder.