Is it possible to use the CWP Console UI to import or add bulk hash values into a policy such as Windows Custom Full Closed Policy?

Products

• Cloud Workload Protection

Issue/Introduction

An administrator has a list/spreadsheet of nearly 250 hashes to block that he needed to be blocked via a Cloud Workload Protection (CWP) policy.  The administrator was looking for an easier way to import them rather than just typing them in manually.

 

Environment

CWP 6.8.2.67 and prior

Cause

Need feature for ease of use

Resolution

In the current version (6.8.2.67) and prior there is no provided API right now to import from a list/spreadsheet containing many hashes for one or many programs. The UI does allow for many hashes to be added for a specific program separated by a space.

For example, as per the following screen shot, you may provide multiple hashes in the same hash field. As previously stated spaces should be used as a separator not a comma or semicolon.

 

Therefore it is possible to craft a program or find a third party utility that can parse spreadsheet or text files and extract one-to-many hashes from the file into an input stream that can be copied and pasted into the UI.

But it is important that commas, semicolons, and any other symbol used as a separator should be converted into a space.

A request has been submitted to add a file import option into a future version.