Phantom MofNops are usually triggered by an OS background service, such as:
- Antivirus scanners
- Data discovery & classification tools
- Data loss prevention tools
These tools monitor, control, filter and scan endpoint activities that may cause phantom MofNops.
Some tips to help resolve this:
For antivirus and data loss prevention tools - whitelist Atakama and the .kama extension by following the instructions in this article.
For data discovery & classification tools - do not scan the Atakama Vault location, which should only contain files that have already been scanned.