How to allow software for specific user

RajeshPremSingh — Mon, 19 Jun 2023 18:43:58 GMT

We are going to block the software by hash or process if in the future user requests an exception for a specific endpoint and how to create an exception for one particular endpoint and allow the software

Re: How to allow software for specific user

bbarmanroy — Tue, 20 Jun 2023 01:54:36 GMT

hi @RajeshPremSingh , you can use a custom prevention rule with BIOC and apply it to all endpoints through restrictions profile.

https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/how-to-block-software-if-the-version-change-happen/m-p/537099#M3992

Here's another great example that you can use as a starter and modify accordingly to meet your needs:

https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/blocking-powershell-execution/td-p/532881

topic How to allow software for specific user in Cortex XDR Discussions

How to allow software for specific user

Re: How to allow software for specific user