This is very odd, but for the past week or so we have noticed that domain\corehostname$ is showing up in the last saved by field in the agent settings tab.
Does anybody know what this might be? It mysteriously changed some endpoint settings last week and we can't figure out how/why.
Thanks!