@groob that’s what I was hinting at that Endpointsecurity is slightly different than System extension