ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

What function does the whitelist have in Endpoint Detection and Response: Cloud 3.x?


Article ID: 173072


Updated On:


Endpoint Detection and Response Cloud


You have added an MD5 or SHA2 hash to the EDR:C 3.x whitelist. When reviewing event logs, you see that the file added to the whitelist shows activity and is submitted to Cynic.


The EDR:C agents will continue to monitor and detect these files as normal. The whitelist will prevent the files from showing up in Results as Alerted.

Note: Whitelist and Blacklists are only for the associated customer, so multi-tenancy are not included.