CB Protection: How to Modify the Ransomware Protection Config?

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

How to modify the ransomware rapid config for unexpected blocks? 

Environment

• CB Protection: 8.x and Higher

Resolution

From the CB Protection Console go to Rules -> Software Rules -> Rapid Configs -> Ransomware Protection 
 

Additional Information

• The ransomware config has multiple different sections that can be modified for allowed programs and behavior
• Modify the specific behavior that is needed to be allowed