Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

EDR: Can you search for processes using SHA256 hashes?

EDR: Can you search for processes using SHA256 hashes?

Environment

  • EDR Server: 6.3.0 and high
  • EDR Sensor: 6.2.1 and Higher

Question

Can processes be searched for using SHA256 hashes instead of MD5?

Answer

Yes.  If the EDR Server is on release v6.3.0 or higher and EDR sensor is on release v6.2.1 or higher SHA256 processes can be searched for by SHA256 hash.

Related Content


Labels (1)
Tags (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎09-09-2020
Views:
1206
Contributors