Endpoint Standard: Sensor blocks VMware Workspace One Intelligent Hub
book
Article ID: 285494
calendar_today
Updated On:
Products
Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
Issue/Introduction
Alerts blocking 'vmware.intelligenthub.communicationservice.exe' as KNOWN_MALWARE or HEURISTIC
Environment
- VMware Carbon Black Cloud Sensor: All Versions
- Endpoint Standard (formerly CB Defense)
- VMware Workspace One Intelligent Hub
Cause
False positive for 'vmware.intelligenthub.communicationservice.exe' SHA256: 12b2c58a69bc8b02f11b4e5423c253b564e237f521302d4ed7ebede6547c4693
Resolution
Issue has been resolved, hash reputation updated to TRUSTED_WHITE_LIST
Additional Information
- Blocks for hash may have occurred between Jan. 2 and Jan. 13th 2021.
- Workarounds:
- Add file hash to company approved list
- Create policy permission Allow and Log rule for **\VMware.IntelligentHub.CommunicationService.exe
Feedback
thumb_up
Yes
thumb_down
No