After installation, Process Guard creates an instance of FireEye xagt.exe with ProcGuard in its command line. This is a container application to interact with agent services. This process runs under the System account like any other agent instances.
What processes are created when the Process Guard Module is installed and enabled?
- Published on Sep 11, 2026
- 1 minute(s) read
Was this article helpful?