1.7 Antivirus Setup for Discovery

To run discovery on Windows workloads, you might need to exclude certain services, files, and folders from antivirus protection.

  • Service: Exclude the PTM Discovery Service (PTMDiscoverySvc.exe) from antivirus protection.

    This service uses the PsExec and PSAdmin utilities to run remote commands on the target MachineDiscoveryReader.dll.

  • Files and Folders: Exclude the PlateSpinDiscovery directory, including any subdirectories and files, from antivirus protection.

    During each discovery attempt, all binaries and services files that the PTM Discovery Service creates and uses are located under the PlateSpinDiscovery directory in the first Windows share it discovers, such as Admin$.

    For Linux workloads, the PlateSpinDiscovery folder is found under the /opt/ directory.

  • Ports: The antivirus software must not restrict any of the ports needed for discovery. For port information, see Section 1.6.2, Ports and Protocols: Workload Discovery.