App Control Server: How to automatically delete malicious file when detected by CDC

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

• Automatically delete malicious file when detected by CDC
• Setup an event rule to automatically ban hashes when "Malicious file is detected" event is triggered

Environment

• App Control Server: All Supported Versions

Resolution

• Refer to the steps described in section "Automating File Deletion Requests" in the User Guide
• Note: Run the rules in "simulate only" mode to test this before enabling them in "action" mode