Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

EDR: How to find a Hash in UI

EDR: How to find a Hash in UI

Environment

  • EDR: All Supported Versions

Objective

Find information related to a Hash in UI

Resolution

There are multiple ways to find a hash from UI:
  •  Binary search with MD5 
    1. On the binary search page, click on +Add Criteria button on the top left side of the page 
    2. Select MD5 from the list of Primary Criteria and enter the hash to search
    3. Select Update
User-added image
 
  • Process search with MD5:
    1. On the process search page, click on +ADD SEARCH TERMS
    2. Select hash > MD5 of exe, binary or file from the choose criteria dropdown
User-added image
  1. Select Add Terms 
 
User-added image
  • Banned Hashes Page
    1. On the Banned Hashes page, select + Ban more hashes
    2. Add the MD5s to be banned in the pop-up
    3. Select Ban Hashes
    4. On the confirmation page, click on drop down button next to computers it was found on.
User-added image

Related Content


Labels (1)
Tags (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎10-29-2020
Views:
2218
Contributors