Carbon Black Cloud: How to add a Hash to the Banned List on the Process Analysis page
search cancel

Carbon Black Cloud: How to add a Hash to the Banned List on the Process Analysis page

book

Article ID: 284887

calendar_today

Updated On:

Products

Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Ban a hash from the Process Analysis page

Environment

  • Carbon Black Cloud Console: All Versions
  • Carbon Black Cloud Windows Sensor: 3.5.0.1278 and Higher

Resolution

  1. Navigate to the Investigate page
  2. Click the blue hyperlink process name or the process analysis button in the event row
  3. Select the Take Action drop down menu at the top right of the Process Analysis page
  4. Select Add to banned list

Additional Information

To remove a presently banned process from the company banned list, execute the same steps above, however. In step 4 select Remove From banned list