Endpoint Standard: Known malware added to company Banned list not auto-deleting

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

Banned files that are known malware are not removed when the auto-delete feature is enabled. 

Environment

• Endpoint Standard Console: All Versions

Cause

Events on banned lists will have a banned tag rather than KNOWN_MALWARE. Only binaries with KNOWN_MALWARE can be auto-deleted at this time.

Resolution

This functionality is behaving as designed.