CB Defense: OTYS Recruiting Technology Application Blocked by CB Defense Sensor

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

• Otys recruiting technology unable to complete operations
• Blocking & Isolation Rule for **\mshta.exe - Communicates over the network' & 'Invokes a command interpreter' - Terminate Process

Environment

• CB Defense PSC Sensor: All Supported Versions
• Microsoft Windows: All Supported Versions
• OTYS Recruiting Technology Application

Cause

• Blocking & Isolation Rule for **\mshta.exe - Communicates over the network' & 'Invokes a command interpreter' - Terminate Process

Resolution

Depending on your Organizational needs, either actions below may be implemented:
 

• Add the following paths to a full bypass
  • **\otys.hta 
  • *:\program files (x86)\otys recruiting technology\otys.exe 

 

• Remove the following Blocking & Isolation Rule
  • **\mshta.exe - Communicates over the network - Terminate Process
  • **\mshta.exe - Invokes a command interpreter - Terminate Process