PaperCut Hive and SentinelOne

“Help! I’m an administrator and I’m running into a SentinelOne warning when trying to install PaperCut Hive on my user’s macOS devices.”

Some customers using SentinelOne report being unable to install the PaperCut Hive macOS client either manually or through an MDM. These are usually accompanied with a malicious warning for “persistence_deception”.

We’ve found that creating path exclusions in SentinelOne for two particular PaperCut directories generally resolves this error and allows the installation to complete successfully.

Add Path Exclusions in SentinelOne for PaperCut Hive

We’re going to add path exclusions for two PaperCut directories in the SentinelOne Management Console.

1. In the SentinelOne Management Console, head to Sentinels > Exclusions.

2. Click the New Exclusion, then the Create Exclusion buttons.

   

3. Set the Exclusion Type to Path.

4. Set the OS dropdown to macOS.

5. Add the following the path into the Path field: /Users/*/Library/PaperCut Hive/

6. Underneath, check the Include Subfolders box, then click the More options button in the bottom right and select the radio button next to Interoperability - extended.

   

7. Click Save and add another at the bottom.

8. Repeat Steps 3 through 6, but add the following path instead: /Library/PaperCut Hive/

   

9. Click Save.

Still having issues?

We’d encourage you to reach out to SentinelOne support to assist. We’re more than happy to get looped into the conversation, which you can do by opening up a ticket at support.papercut.com .