CB Defense: OTYS Recruiting Technology Application Blocked by CB Defense Sensor
search cancel

CB Defense: OTYS Recruiting Technology Application Blocked by CB Defense Sensor

book

Article ID: 290706

calendar_today

Updated On:

Products

Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

  • Otys recruiting technology unable to complete operations
  • Blocking & Isolation Rule for **\mshta.exe - Communicates over the network' & 'Invokes a command interpreter' - Terminate Process

Environment

  • CB Defense PSC Sensor: All Supported Versions
  • Microsoft Windows: All Supported Versions
  • OTYS Recruiting Technology Application

Cause

  • Blocking & Isolation Rule for **\mshta.exe - Communicates over the network' & 'Invokes a command interpreter' - Terminate Process

Resolution

Depending on your Organizational needs, either actions below may be implemented:
 
  • Add the following paths to a full bypass
    • **\otys.hta 
    • *:\program files (x86)\otys recruiting technology\otys.exe 
 
  • Remove the following Blocking & Isolation Rule
    • **\mshta.exe - Communicates over the network - Terminate Process
    • **\mshta.exe - Invokes a command interpreter - Terminate Process