App Control: Is it Possible to Block Writes of Unapproved Files to a Location?
book
Article ID: 288542
calendar_today
Updated On:
Products
Carbon Black App Control (formerly Cb Protection)
Issue/Introduction
Is it possible to block writes of unapproved files to a specific location, and only allow approved files to be created?
Environment
App Control: All Supported Versions
Resolution
No, this is not possible.
This is because a file's approval state is not determined until after the write is complete and the file can be hashed, and checked against any existing approval methods.