App Control: How to allow tracking of Python extensions

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

Make Python files interesting to the Agent.

Environment

• App Control Agent: All Supported Versions
• App Control Console: All Supported Versions

Resolution

1. Log in to the Console and navigate to Rules > Software Rules > Scripts.
2. Click View Details (pencil icon) on Python.
3. Make the necessary changes, set the Status to Enabled, click Save & Exit.

Additional Information

• In order for Custom Rules to affect the Python extension types, they must first be designated as Interesting by the Agent.
• Enabling the Script rule above will tell the Agent to start tracking the activity of these file extensions.
• Note that once this enabled, any Custom Rules you already have enabled that involve these file extensions will now be acted upon.
• It is recommended to test on a small scale before deploying the changes environment-wide.