logo

Knowledge Base

Access official resources from Carbon Black experts

IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

EDR: Banned Hashes Are Still Allowed to Run

EDR: Banned Hashes Are Still Allowed to Run

Environment

  • EDR Sensor: All Supported Versions
  • EDR Server: All Supported Versions

Symptoms

  • Banned hashes are being ran even after being banned

Cause

  • This can happen if the option "Process Banning" is not enabled in the sensor group

Resolution

  1. Go to Sensors -> Required Sensor Group -> Settings -> Advanced
  2. Check "Process Banning"

Related Content


Labels (1)
Labels:
Tags (2)
Was this article helpful? Yes No
50% helpful (1/2)
Article Information
Author:
CB_Support
Creation Date:
‎07-28-2021
Views:
489
Contributors
logo

Copyright © 2005-2023 Broadcom. All Rights Reserved. The term “Broadcom” refers to Broadcom Inc. and/or its subsidiaries.