CB Protection: How to stop alerts for globally approved files being flagged as malicious
search cancel

CB Protection: How to stop alerts for globally approved files being flagged as malicious

book

Article ID: 285562

calendar_today

Updated On:

Products

Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

To prevent unnecessary alerts being generated for globally approved files

Environment

  • CB Protection Console: All versions

Resolution

  1. On the CB Protection console go to 'Tools' -> 'Alerts'
  2. Find the alert for "Malicious File Detected'
  3. Click 'Edit Alert'
  4. Under 'Criteria', select the option 'Ignore already approved files'
  5. Click Save