CB Response: Can Malicious Files Be Deleted Using CB Response After Banning The Hash?

[#1]

Environment

• CB Response Server: 6.2.4 and Higher
• CB Response Sensor: All Supported Versions

Question

Can malicious files be deleted from endpoints using CB Response after banning the hash?

Answer

CB Response does not currently have the functionality to delete a file corresponding to its banned hash from the console.

Additional Notes

Live Response can be used to remote into the endpoint and delete the file whose hash was banned.

Related Content

https://community.carbonblack.com/t5/Documentation-Downloads/Cb-Response-6-2-4-User-Guide/ta-p/61326... (pp. 142 - 153)