> For the complete documentation index, see [llms.txt](https://docs.twosense.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.twosense.ai/troubleshooting/anti-virus-configuration.md).

# Anti-Virus Configuration

## Anti-Virus Configuration

Due to the deeply integrated nature of the Twosense agent software, heuristic analysis from anti-virus engines may erroneously classify components of it as malware. If this happens, the anti-virus may attempt to quarantine the software and cause issues with the machine.

If your organization uses an endpoint protection solution or other form of anti-virus, please allow-list the following paths to prevent issues. Refer to your vendor's documentation on how to properly exempt paths from detection and quarantine.

* `C:\Program Files\TWOSENSE.AI\*`
* `C:\Windows\system32\drivers\kbfiltr.Sys`
  * This driver is a keyboard filter which allows the Twosense agent to capture typing behavior during Windows login. To verify its authenticity, you may check the digital signature — it should be signed by Microsoft.

## Network and Firewall Configuration

Outgoing connections to the following hosts should be allow-listed. Depending on your use case, you may be provided a more specific list of hostnames by your account manager.

* `api.twosense.ai`
* `apiv2.twosense.ai`
* `endpoint-management.twosense.ai`
* `app.twosense.ai`
* `webapi.twosense.ai`
* `manager-approval.twosense.ai`
* `sentry.twosense.ai`
* `o386114.ingest.sentry.io`
* `logs.us-east-1.amazonaws.com`
* `monitoring.us-east-1.amazonaws.com`
* `api.mixpanel.com`
* `radius.twosense.ai`