Understanding the interactions between SES Evolution and Windows Defender

The SES Evolution agent automatically adds exceptions to Windows security system settings to prevent the Windows Defender antivirus program from triggering and blocking when SES Evolution performs legitimate operations.

These exceptions are added to the Virus and Threat Protection menu in the Windows Security window:

• in the list of controlled folder accesses,

• in the list of exclusions.

Thanks to these exceptions, Windows Defender does not block the following SES Evolution actions:

• Yara scans or Indicators of Compromise (IoC) searches,

• creation of Windows snapshots to protect against ransomware attacks. This creation is blocked if Windows Defender Ransomware protection is enabled.

These exceptions are removed when the agent is uninstalled.

NOTE
We recommend closing the Windows Security window when installing, updating or repairing a SES Evolution agent.