NOTE: SysCore is also known and referred to as
MPT in Trellix products and documentation.
SysCore describes a shared technology of drivers and libraries used by Trellix products to interact with the operating system and other applications.
When you upgrade or install the EDR Client, if
SysCore versions 22.2 or 22.4 are installed, they must be patched. A reboot is needed to upgrade
SysCore before you can continue with the update or installation of a Trellix product that requires a newer
SysCore version.
The patching of
SysCore 22.02 and 22.04 is needed to prevent the EDR client-injected processes from causing CPU issues during uninjection resulting from a
SysCore upgrade. This issue is only seen when EDR is present on the endpoint.