CB Response: Is it possible to enable/disable Hash Banning for all groups at the same time?

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Can CB Response enable or disable Hash/Process Banning across all sensor groups at once?

Environment

• CB Response Server: All Versions

Resolution

Yes. Hash/Process Banning can be disabled from the /etc/cb/cb.conf file.

Additional Information

For further information for Hash Banning, see the CB Response User Guide on page: 142