Cb Response: Can I ban a hash for a certain number of endpoints?

[#1]

Environment

• Cb Response Server: All Versions

Question

• Can I ban a hash for a certain number of endpoints in Cb Response?

Answer

• No, hashes are banned in Cb Response for either all endpoints or no endpoints.
• Process hash banning can be disabled per sensor group to allow banned hashes to run on these endpoints.

Additional Notes

• Hash bans can be disabled in Cb Response to allow the process to run.

Related Content

• Cb Response 6.2.3 User Guide (pp. 135-146)