EDR: How to find a Hash in UI
search cancel

EDR: How to find a Hash in UI


Article ID: 288515


Updated On:


Carbon Black EDR (formerly Cb Response)


Find information related to a Hash in UI


  • EDR: All Supported Versions


There are multiple ways to find a hash from UI:
  •  Binary search with MD5 
    1. On the binary search page, click on +Add Criteria button on the top left side of the page 
    2. Select MD5 from the list of Primary Criteria and enter the hash to search
    3. Select Update
User-added image
  • Process search with MD5:
    1. On the process search page, click on +ADD SEARCH TERMS
    2. Select hash > MD5 of exe, binary or file from the choose criteria dropdown
User-added image
  1. Select Add Terms 
User-added image
  • Banned Hashes Page
    1. On the Banned Hashes page, select + Ban more hashes
    2. Add the MD5s to be banned in the pop-up
    3. Select Ban Hashes
    4. On the confirmation page, click on drop down button next to computers it was found on.
User-added image