For the Process Tracker to function on the agent, the Real-Time Indicator Detection in Configurations in Edit Policy must be turned on. If you install the module on an agent without turning on real-time indicator detection, no process execution events will be detected.
Log in to the Endpoint Security Web UI as an administrator.
From the Admin menu, select Polices.
Locate the policy you want to edit.
In the Actions column, click the gear icon, and click Edit Policy.
In the Edit Policy page, in Configurations, select Real-Time Indicator Detection.
In the details panel, move the Real-Time Indicator Detection toggle to On.
For information on enabling the Process Tracker, see Enabling the Process Tracker agent module.