Process Guard generates detection or block events for every access request. These events, if not throttled, can increase network traffic and increase load on the Endpoint Security server. The Throttling interval can be set to defined intervals to aggregate the duplicate events generated within the throttle period. Duplicate events are attempts to access LSASS from the same process and same method. The default interval is 60 minutes.
Process Guard Throttle Interval Policy Settings
 |