Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

EDR: Banning Total Blocks in the Banned Hashes UI is Not Increasing

EDR: Banning Total Blocks in the Banned Hashes UI is Not Increasing

Environment

  • EDR Server: All Supported Versions

Symptoms

The "Total Blocks" amount in the "Managed Banned Hashes" page do not increase when some hashes have been blocked

Cause

If the "Ignore this Report?" switch is set to Yes in the "Carbon Black Process Blocking" Report the values will not increase

Resolution

1. Navigate to "Triage Alerts"
2. Choose "Carbon Black Process Blocking" link in the Source column
3. In the "Carbon Black Process Blocking" Report set the "Ignore the Report?" switch to No

Additional Notes

Setting the "Ignore this Report?" switch to No in the "Carbon Black Process Blocking" Report will let any subsequent blocks to be reflected in the "Total Blocks"

Related Content


Labels (1)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎02-16-2022
Views:
254
Contributors