What function does the whitelist have in Endpoint Detection and Response: Cloud 3.x?

Products

• Endpoint Detection and Response Cloud

Issue/Introduction

You have added an MD5 or SHA2 hash to the EDR:C 3.x whitelist. When reviewing event logs, you see that the file added to the whitelist shows activity and is submitted to Cynic.

Resolution

The EDR:C agents will continue to monitor and detect these files as normal. The whitelist will prevent the files from showing up in Results as Alerted.

Note: Whitelist and Blacklists are only for the associated customer, so multi-tenancy are not included.