


Double-click the icon to open the Symantec Endpoint Protection configuration screen. GUI check: Locate the Symantec Endpoint Protection icon in the system tray. HKLM\SOFTWARE\Wow6432Node\Symantec\Symantec Endpoint Protection\CurrentVersion\public-opstateĬriteria: If the "LatestVirusDefsDate" is older than 7 calendar days from the current date, this is a finding. HKLM\SOFTWARE\Symantec\Symantec Endpoint Protection\CurrentVersion\public-opstate On the machine use the Windows Registry Editor to navigate to the following key: Under the Status tab, observe the "Definitions:" area for Virus and Spyware Protection, Proactive Threat Protection, and Network Threat Protection.Ĭriteria: If the "Definitions:" date is older than 7 calendar days from the current date, this is a finding.

On the machine, locate the Symantec Endpoint Protection icon in the system tray. Note: If the vendor or trusted site’s files are also older than 7 days and match the date of the signature files on the machine, this is not a finding.
