List of agent plugins and descriptions.

jfaldmo

Is there a list of the Agent plugins (or executables associated with the agent) and descriptions of what they do? 

Microsoft Defender is blocking SolarWinds Agent executables and I need to know what they do and justify them running. Here is a list of the executables that are being blocked. As a side note, I don't notice any loss of functionality.

Some of these are being blocked on a few servers, while others are blocked on hundreds of servers--
C:\Program Files (x86)\Common Files\SolarWinds\JobEngine.v2\SWJobEngineWorker2.exe
C:\Program Files (x86)\Common Files\SolarWinds\JobEngine.v2\SWJobEngineWorker2x64.exe
C:\Program Files (x86)\SolarWinds\Agent\Plugins\ADMProbe\SolarWinds.ADM.AgentPlugin.exe
C:\Program Files (x86)\SolarWinds\Agent\Plugins\JobEngine\SWJobEngineSvc2.exe
C:\Program Files (x86)\SolarWinds\Agent\Plugins\JobEngine\SWJobEngineWorker2.exe
C:\Program Files (x86)\SolarWinds\Agent\Plugins\JobEngine\SWJobEngineWorker2x64.exe
C:\Program Files (x86)\SolarWinds\Agent\Plugins\ServiceHost\SolarWinds.ServiceHost.Process.exe
C:\Program Files (x86)\SolarWinds\Agent\SolarWinds.Agent.Service.exe
C:\Program Files (x86)\SolarWinds\Orion\SEUM\Player\SolarWinds.SEUM.Agent.Service.exe

m_roberts

The JobEngine references is the service that performs the data collection, which for the agent installed on an end point monitored server is the local collection of service, perfmon, powershell etc. data. For the non agent folders above, this is the Orion polling engine (Main or APE) that is performing remote polling functionality.

The last entry in your list is the WPM player agent service, which will perform the web page journey transactions from that server to the website applications configured against it.

All are necessary for correct function, so if things are still being polled and data is showing, your AV system is not actively stopping these from functioning