This sounds like an antivirus in action - check your quarantined files. Cisco AMP Endpoint Connector has been brought up as a source of this a few times (and I’ve experienced this myself), but I’m sure there’s other similar products as well.
1 Like