yup, we are talking about here:
Anyone else seeing AV detections against Insight Agent token_handler.exe (v4.1.1.55)? - InsightIDR - Rapid7 Discuss