topic Re: Advice on blocking the 'EXTENSION PACKS for Oracle Virtual Box in Custom Signatures

Advice on blocking the 'EXTENSION PACKS for Oracle Virtual Box

Rick_Miller — Wed, 24 Aug 2022 16:20:21 GMT

Oracle's Virtual Box is free and available to use under the GPL v2 license terms.

They have Extension Pack which is not free and can invoke a software audit if found.

We are looking to see if anyone has an application snippet to prevent download of the Extension Pack.

Unfortunately the download is a typical download in that it is available from multiple sources

nikoolayy1 — Tue, 22 Nov 2022 18:57:30 GMT

Better consider trying DLP and the file name or even better Palo Alto XDR or another EDR solution and uploading the file hash so that it is blocked.

Also see this discussion:

Hope this helps 🙂

nikoolayy1 — Sat, 07 Jan 2023 17:39:38 GMT

Hello @Rick_Miller , Did you manage to find a solution to this issue?

Rick_Miller — Mon, 06 Feb 2023 19:33:10 GMT

continue to ask for an application code like what was provided for malwarbytes