Carbon Black Cloud: How to Add a Hash to the Banned List on the Binary Details Page

[#1]

Environment

• Carbon Black Cloud Console: All Versions
• Carbon Black Cloud Sensor: 3.5 and Higher

Objective

Add a hash to the deny list from the Binary Details page

Resolution

1. Navigate to the Investigate page
2. Click on the Processes tab and then the blue hyperlink process name or the process analysis button in the event row
3. Select the Binary Details hyperlink in the selected node side bar
4. On the Binary Details page select Add to banned list

Additional Notes

• To remove a presently blocked process from the company deny list execute the same steps above. In step 4 select Remove From Banned List
• If a hash is accidentally added to the deny list on the Binary Details page, refresh the page to display the Remove From Banned List button

Related Content

Enterprise EDR: How to enable binary uploads