# \[Solved problem\] Endpoint security can not detect malware

**URL:** <https://discuss.elastic.co/t/solved-problem-endpoint-security-can-not-detect-malware/359090>\
**Category:** Endpoint Security\
**Tags:** elastic-stack-security\
**Created:** [May 8, 2024, 6:27pm UTC](https://discuss.elastic.co/t/solved-problem-endpoint-security-can-not-detect-malware/359090 "2024-05-08T18:27:27Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Intruder](https://avatars.discourse-cdn.com/v4/letter/i/c5a1d2/32.png) [@Intruder](https://discuss.elastic.co/u/Intruder)\
**Post date:** [May 8, 2024, 6:27pm UTC](https://discuss.elastic.co/t/solved-problem-endpoint-security-can-not-detect-malware/359090/1 "2024-05-08T18:27:28Z")

</div>

Reboot the kibana and elasticsearch will do the trick after reconfigure the rules and policy.

---

<div class="post-metadata">

**Author:** ![jessgarson](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jessgarson/32/129841_2.png) [@jessgarson](https://discuss.elastic.co/u/jessgarson)\
**Post date:** [May 9, 2024, 7:13pm UTC](https://discuss.elastic.co/t/solved-problem-endpoint-security-can-not-detect-malware/359090/2 "2024-05-09T19:13:43Z")

</div>

Thanks for sharing your solution @Intruder

---

<div class="post-metadata">

**Author:** ![ferullo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ferullo/32/74240_2.png) [@ferullo](https://discuss.elastic.co/u/ferullo)\
**Post date:** [May 13, 2024, 12:39pm UTC](https://discuss.elastic.co/t/solved-problem-endpoint-security-can-not-detect-malware/359090/3 "2024-05-13T12:39:40Z")

</div>

For some background context, Elastic Defend/Endpoint autonomously protects hosts. If it received a successful policy application in the past then it will protect the host even if something is not working with Kibana, Elasticsearch, or Fleet Server. Given that rebooting fixed your issue my presumption is there had not been a successful policy application until you rebooted Kibana.

---

<div class="post-metadata">

**Author:** ![Intruder](https://avatars.discourse-cdn.com/v4/letter/i/c5a1d2/32.png) [@Intruder](https://discuss.elastic.co/u/Intruder)\
**Post date:** [May 14, 2024, 9:16am UTC](https://discuss.elastic.co/t/solved-problem-endpoint-security-can-not-detect-malware/359090/4 "2024-05-14T09:16:45Z")

</div>

I think the main reason could be the ram of VM.  
The main problem was

Security → Alert ， can not auto update the alerts after running a malware.  
For example , before I run the mimikatz , the Alert shows 10 alerts.  
The refresh button is not working ,still 10  
And after I reboot the kibana and elastic , it shows 12.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 11, 2024, 9:16am UTC](https://discuss.elastic.co/t/solved-problem-endpoint-security-can-not-detect-malware/359090/5 "2024-06-11T09:16:52Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.