IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

CB Defense: When is the "Ignore" Reputation Applied?

CB Defense: When is the "Ignore" Reputation Applied?

Environment

CB Defense Web Console: All Versions

Question

When is the "Ignore" reputation (i.e., highest trust level) applied to an application?

Answer

The "Ignore" reputation is assigned to CB Defense executables known to the sensor.  These may be:

  • Hard-coded by path and running from within CB Defense self-protected folders
  • Or use a locally verified code signature

Additional Notes

  • Full bypass permission for all operations will result in treatment similar to the "Ignore" reputation by the sensor.
  • Bypass is tracked in parallel to reputation, so bypassed files will not technically be reported as having "Ignore" reputation.

Related Content


Was this article helpful? Yes No
100% helpful (1/1)
Article Information
Author:
Creation Date:
‎09-09-2020
Views:
847
Contributors