These audit log entries are expected.
The
SIARevocation extension generates the "Revoked Extension List Loaded and the version now is x" message. The extension tracks potentially revoked extensions. The message is recorded when the list of potentially revoked extensions is updated. Uninstalling the
SIARevocation extension stops this audit log from appearing, but uninstalling the extension isn't recommended.
When Exploit Prevention content (
product Id = ENDPCNT_1000) is checked in to the repository or moves between branches, the content is parsed, and the new signatures are added to the Exploit Prevention policies. This action is done so the signature Block and Report settings can be configured in the policies. A "Save policy object" message appears in the audit log for each affected ENS policy object.