Windows Error Reporting generates Event 1001
Last Modified: 2/22/2023
Affected Products
Languages:
This article is available in the following languages:
Trellix CEO, Bryan Palma, explains the critical need for security that’s always learning.
As per Gartner, "XDR is an emerging technology that can offer improved threat prevention, detection and response."
Trellix announced the establishment of the Trellix Advanced Research Center to advance global threat intelligence.
Trellix Advanced Research Center analyzes threat data on ransomware, nation-states, sectors, vectors, LotL, MITRE ATT&CK techniques, and emails.
As of May 14, 2024, Knowledge Base (KB) articles will only be published and updated in our new Trellix Thrive Knowledge space.
Log in to the Thrive Portal using your OKTA credentials and start searching the new space. Legacy KB IDs are indexed and you will be able to find them easily just by typing the legacy KB ID.
Windows Error Reporting generates Event 1001
Technical Articles ID:
KB89984
Last Modified: 2/22/2023 Environment
Endpoint Security (ENS) Threat Prevention 10.x Microsoft Windows 10 Problem
Windows Error Reporting generates information level events for Event ID 1001 after you install ENS.
Cause
The Windows operating system self-disables Windows Defender when it detects the presence of an antimalware product. As a result, Windows telemetry generates metrics for Event ID 1001 similar to: Event Name: MpTelemetry Response: Not available Cab Id: 0 P1: unspecified P2: HardeningTelemetry P3: HardeningTelemetryDisableAS WorkaroundTo avoid Windows Error Reporting generating Event ID 1001, disable the Windows Defender features Cloud-based Protection and Automatic sample submission before you install ENS.
For instructions about how to use Group Policy to enable and disable these features, see the Microsoft article Turn on or off cloud-delivered protection. Affected ProductsLanguages:This article is available in the following languages: |
|