IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

Endpoint Standard: Known malware added to company Banned list not auto-deleting

Endpoint Standard: Known malware added to company Banned list not auto-deleting

Environment

  • Endpoint Standard Console: All Versions

Symptoms

Banned files that are known malware are not removed when the auto-delete feature is enabled. 

Cause

Events on banned lists will have a banned tag rather than KNOWN_MALWARE. Only binaries with KNOWN_MALWARE can be auto-deleted at this time.

Resolution

This functionality is behaving as designed. 

Related Content


Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎02-02-2021
Views:
393
Contributors