Unexpected Blocks After Microsoft Office Update

Products

• Carbon Black Cloud Endpoint Standard

Issue/Introduction

After a Microsoft Office update, blocks occur on the applications (Excel, Word, Powerpoint, etc).

Environment

• Carbon Black Cloud: All Supported Versions
• Carbon Black Cloud Sensor: All Supported Versions

Cause

The reputation of the file may have been RESOLVING or NOT_LISTED and blocked by a reputation rule.

Resolution

• If the certificate of the file is trusted, you can Add the Cert to the Approved List. 
  AND/OR
• Submit the file for analysis here

Additional Information

To see the certificate click "First Seen Signature" on the alert details pane