Cb Response: Can I ban a hash for a certain number of endpoints?
book
Article ID: 287286
calendar_today
Updated On:
Products
Carbon Black EDR (formerly Cb Response)
Issue/Introduction
- Can I ban a hash for a certain number of endpoints in Cb Response?
Environment
- Cb Response Server: All Versions
Resolution
- No, hashes are banned in Cb Response for either all endpoints or no endpoints.
- Process hash banning can be disabled per sensor group to allow banned hashes to run on these endpoints.
Additional Information
- Hash bans can be disabled in Cb Response to allow the process to run.
Feedback
thumb_up
Yes
thumb_down
No