topic Re: How to add a list of hashes to block list in Cortex XDR Discussions

How to add a list of hashes to block list

Edgar_Lapuerta — Tue, 18 Apr 2023 11:14:40 GMT

Hello!

Can I add a list of hashes to block list?

Maybe from CSV?

I have to add every hash manually?

I have a list of 80 IOCs of a ransomware and I would like to add them to the block list at once.

Is it possible?

Thanks in advance.

Re: How to add a list of hashes to block list

timurphy — Tue, 18 Apr 2023 16:11:57 GMT

Hi @Edgar_Lapuerta,

You can import file hashes in bulk via CSV upload within the Action Center (Incident Response > Response > Action Center > New Action > Import Hash Exceptions).

Here is a how-to video which explains the feature and provides a demonstration.

I hope this helps!

Regards,

Tim

Re: How to add a list of hashes to block list

Edgar_Lapuerta — Wed, 19 Apr 2023 09:06:34 GMT

Thanks!

I was confused due to how I got used to dealing "exceptions" in our antivirus and other platforms, but now it is clear.

Regards.

Edgar.