Forum Discussion
Solved
M365 Defender flags MMAExtensionHeartbeatService and GCService as potential risk
This feedback is provided for improvement of Azure Monitor experience in customers using the M365 Defender Security Recommendations feature. M365 Defender produces a vulnerability recommendation of ...
I agree. This is happening for the Azure Monitor Agent. Is anyone at Microsoft going to respond or fix this?
I second this feedback. In addition to the "GCService" and "MMAExtensionHeartbeatService" that John mentioned, I'm also seeing this recommendation for "vmGuestHealthAgent" and "HybridWorkerService" as well. Both of these additions also reside in "C:\Packages." Does the security recommendation *actually* intend that I change the executable path for Microsoft services??
I agree. This is happening for the Azure Monitor Agent. Is anyone at Microsoft going to respond or fix this?