Just Published! Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Cb Response: Can I ban a hash for a certain number of endpoints?

Cb Response: Can I ban a hash for a certain number of endpoints?

Environment

  • Cb Response Server: All Versions

Question

  • Can I ban a hash for a certain number of endpoints in Cb Response?

Answer

  • No, hashes are banned in Cb Response for either all endpoints or no endpoints.
  • Process hash banning can be disabled per sensor group to allow banned hashes to run on these endpoints.

Additional Notes

  • Hash bans can be disabled in Cb Response to allow the process to run.

Related Content


Labels (1)
Tags (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎11-26-2018
Views:
929
Contributors