topic IOC rule creation in Cortex XDR Discussions

IOC rule creation

akshayhariRajan — Thu, 27 May 2021 09:01:54 GMT

If I add a file hash in IOC list, will it be automatically blocked as well?

Remo — Sun, 30 May 2021 22:24:51 GMT

No, file hashes that you use to create IOC rules are not automatically blocked.

fmoixsante — Mon, 31 May 2021 09:44:54 GMT

You could create a BIOC for that file specifying a behavior and add that BIOC to a Restriction profile.