I have built a Fixlet that detects if a process is running on windows machines and if so it will issue a command to kill the process. I have deployed the Fixlet as a policy, with the settings
I have tested on my machine and the policy works fine during the first and second execution.
When I execute the applications that creates the process, I receive the action and the process is terminated. I then re-open the application and the action is triggered once again. I then re-open the application and the action doesn’t become relevant until a few hours later. However, I can see that the Source Fixlet becomes relevant.
If I restart the agent, the action will become relevant right away. And it will run a couple of times right away but not more.
Am I correct expecting that the action becomes relevant every time the process is detected?
This is my relevance:
windows of operating system and (Exists processes Whose (name of it as string as lowercase = "processname.exe" as lowercase))
References: