Forum Discussion
mdatp_audisp_plugin
I was wondering if anyone knows what /opt/microsoft/mdatp/sbin/mdatp_audisp_plugin is used for on RHEL. I've noticed it can consume allot of resources in some cases and hoping to find some docum...
Check if you have any additional rules in /etc/audit/rules.d/ dir. We had 30-ospp-v42-*.rules and it generated very high load with mdatp.