Traps and Endpoint Security Manager Processes

The following processes are initiated by Traps and the Endpoint Security Manager (ESM).
Component
Process Name
Description
ESM
ESM Server
CyveraServer.exe
ESM Server core service, which communicates with the agents and with WildFire.
Traps for Mac
Traps agent
trapsd
Main Traps process.
Traps agent
authorized
Traps process which communicates with WildFire to obtain the latest verdicts.
Traps agent
pmd
Traps process which communicates with the ESM Server to obtain the latest security policies.
Traps agent
kproc_ctrl
Kernel extension which enforces the policy and prevent security attacks, when needed.
Traps for Windows
Traps agent
CyveraConsole.exe
User interface for the Traps console. Runs only after the user launches the console from the notification area (system tray).
Traps agent
CyveraService.exe
Traps agent core service, which works with Cyserver.exe to enforce the policy, communicate with the server, and prevent security attacks, when needed.
Traps agent
Cyserver.exe
Traps agent core service, which works with CyveraService.exe to enforce the policy, communicate with the server, and prevent security attacks, when needed.
Traps agent
Cytray.exe
Traps Tray process, allows the user to click on the tray icon and run the console. Runs constantly in the background.
Traps agent
Tda.exe
Traps dump analyzer, which analyzes the contents of memory locations and other data when a prevention event occurs on the endpoint.
Traps agent
Tdawork.exe
Traps dump analyzer worker processes, one per processor. These processes run in the background and should run constantly.

Related Documentation