Carbon Black Cloud: Should files on the Banned or Approved List show on the Malware Removal page?

[#1]

Environment

• Carbon Black Cloud Console: All Versions

Question

If a file has the KNOWN_MALWARE reputation in the Cloud and it is added to either the Approved or Banned list, should it still show on the Malware Removal page?

Answer

No these files should not be displayed. However due to a current product limitation, these files are still being displayed. Work is being done to fix this limitation. 

Additional Notes

• Once the hash has been added to the Reputation page (Enforce > Reputation) it will no longer appear on the Malware Removal page
• This change is being implemented under DSER-21596 to improve functionality in the Console

Related Content

Carbon Black Cloud: How to Auto-delete known malware hashes by default
CB Defense: How to Remove Known Malware Using the Malware Removal Page
Cb Defense Web Console: How Long do Entries Stay on Malware Removal Page?
Endpoint Standard: What Reputation Should a Hash Have to be Included on the Malware Removal Page?