We have two windows domain controllers that have Kace agent ver. 10.1.43 installed on them. On both servers on a consistent every six hours, we are seeing the ampwatchdog.exe start up the netstat.exe process. Why would it be doing this?
I have tried to look for any script or scheduled job and have come up empty.
Let me guess:
You set the check in interval to 6hr.
And short after the tasks are started the inventory is updated for the system in question.
Sysinternals Process Monitor (or maybe Process Explorer) is great for this. When using Process Monitor, after you catch that the netstat.exe process is launched, you can open up its Process Tree (under Tools) to see a tree-view process history. Examining the command-lines of processes in question may also help.