Environment
- Endpoint Standard Console: All Versions
Symptoms
Banned files that are known malware are not removed when the auto-delete feature is enabled.
Cause
Events on banned lists will have a banned tag rather than KNOWN_MALWARE. Only binaries with KNOWN_MALWARE can be auto-deleted at this time.
Resolution
This functionality is behaving as designed.
Related Content