topic Re: Block APP in Cortex XDR Discussions

Block APP

cylusaragao — Fri, 24 May 2024 12:13:58 GMT

Dear,

I want to block an application, I configured it to block by the process, but when changing the name of the executable it also changes the name of the service as shown in the images. Would I be able to block it by the name that appears in the task manager?

Re: Block APP

jmazzeo — Fri, 24 May 2024 15:30:27 GMT

Hi @cylusaragao, thanks for reaching us using the Live Community.

You can try to block it using the installation folder, or maybe the best option is to block the Signer, in that way no mather where is it installed or what name the exe uses to run it will be blocked.

Please let me know if you need help with this.

If this post answers your question, please mark it as the solution.

Re: Block APP

cylusaragao — Fri, 24 May 2024 16:54:36 GMT

Hi,

For sygner not that possible because microsoft,installation folder how doing?