Windows Defender flagged brokerservice.exe as Trojan:MSIL/AgentTesla.Z!MTB then quarantined it - guess we are missing an exclusion 🙄