Environment
- Carbon Black Cloud Console: All versions
- Endpoint Standard CSR Console: All versions
- Endpoint Standard Sensor: All Windows versions
Question
How does one provide reputation approval for a cmdline-based Chrome plugin like SmartBear?
Answer
- Edit the policy for the target sensors.
- Prevention Tab
- Permissions
- Add an api bypass rule for the following path similar to this (SmartBear is the example):
C:\Program Files (x86)\SmartBear\TestComplete 14\**
Additional Notes
If the API Bypass rule does not work, one may have to set a rule was to allow "Invokes a command interpreter"
- Prevention Tab
- Permissions
- Turn off Deny for "Invokes a cmdline interpreter"