ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

What function does the whitelist have in Endpoint Detection and Response: Cloud 3.x?

book

Article ID: 173072

calendar_today

Updated On:

Products

Endpoint Detection and Response Cloud

Issue/Introduction

You have added an MD5 or SHA2 hash to the EDR:C 3.x whitelist. When reviewing event logs, you see that the file added to the whitelist shows activity and is submitted to Cynic.

Resolution

The EDR:C agents will continue to monitor and detect these files as normal. The whitelist will prevent the files from showing up in Results as Alerted.

Note: Whitelist and Blacklists are only for the associated customer, so multi-tenancy are not included.

Attachments