Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Cb Response: Are disabled hashes from the Banned Hashes list still stored on endpoints?

Cb Response: Are disabled hashes from the Banned Hashes list still stored on endpoints?

Environment

  • Cb Response Server: All Versions
  • Cb Response Sensor: All Versions

Question

Do endpoints retain records of previously banned hashes or only the currently banned hashes?

Answer

  • Only actively banned hashes will be stored on an endpoint. 
  • If a hash is removed from the banned list, the endpoint will remove that hash from its database during the next sync

Related Content


Labels (1)
Tags (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎01-10-2019
Views:
522
Contributors