Arctic Wolf Agent Processes

Updated Aug 31, 2023

Arctic Wolf Agent processes

Arctic Wolf® Agent runs different processes depending on the operating system:

Note: If you install Agent alongside antivirus, endpoint scanning, or similar software, add these processes to your allowlist so that Agent works correctly.

Agent processes that run on Linux

Agent processes that run on macOS

Agent processes that run on Windows


  • For 32-bit versions of Windows, the process paths begin with C:\Program Files\... instead of C:\Program Files (x86)\....
  • If you are a Managed Risk (MR) customer, vulnerability scanning uses the PowerShell console. If the console usage is blocked by endpoint security tools, the scans fail.