Each day at 19:00 (CET) my EDR detect a file in a temporary folder :
Code: Select all
successfully quarantined the threat vblkid on Wed, 01 Feb 2023, 18:03:09 UTC.
Threat path: /tmp/{5ad992d9-5ea8-466c-9934-2b7783349bfd}/vblkid
No crontab at this time.
I know the blkid command but not vblkid.
I don't have a partition with this UUID : 5ad992d9-5ea8-466c-9934-2b7783349bfd
Can you help me to knowwhat is this file ?
I had this alert after deploying a VM Template, but 2 days ago, i deployed this template for 2 VMS, only 1 have this message.
Thanks