cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
IMPORTANT: Currently some Knowledge Base content may be unavailable. We are working diligently to restore these articles and appreciate your patience.

EDR: Is It Possible To Search For a PDF Or Excel File By Hash To Find What Endpoints The File Is On?

EDR: Is It Possible To Search For a PDF Or Excel File By Hash To Find What Endpoints The File Is On?

Environment

  • EDR Server: All Versions

Question

Is it possible to search for a PDF or Excel file by hash to find what endpoints the file is on using EDR?

Answer

No, PDF and Excel files are not tracked by EDR, and would not show in the console upon search.

Additional Notes

  • EDR will only collect binaries that execute; it does not collect scripts, batch files, or computer files that are created or modified.
  • App Control is the more suitable product to find files by hash.

Related Content


Labels (1)
Tags (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎08-05-2020
Views:
42