I have launched an Endpoint Security Assessment which has failed. The main error is “Access is denied”:
An error occurred trying to start process 'C:\Program Files\Cymulate\Agent\Executor\36.0\CymulateEDRScenarioExecutor.exe' with working directory 'C:\Program Files\Cymulate\Agent\Executor\36.0'. Access is denied.
I have slightly debugged the problem and I can confirm that the user exists on the machine as well as the exceptions made in the EDR are the following:
Has anyone else experienced this error on Endpoint Security Module or in another one? How could I debug deeper this error?
Thank you very much!
Best answer by David_Kellerman_CISSPView original
It indeed looks like something is blocking the executor from running.
It could be the EDR or lack of permissions.
I would double-check the EDR exclusions or at least try to see if there are any detections/preventions around this process.
In addition, ensure the user you’re running the assessment with has the rights to access this file.
If it doesn’t work, please raise a ticket with our support at firstname.lastname@example.org.