topic Re: Traps is blocking chain in General Topics

Traps is blocking chain

BigPalo — Mon, 25 Nov 2019 15:19:38 GMT

Hi,

We have a legitime application which is running a script. This script and the chain is detected by traps as threat. So we would like to configure an exception for this

cmd.exe --> cscript //E:JScript //nologo "C:\ProgramData\signature\sign.bat"

So its possible to add this exception? where it can be configured?

Re: Traps is blocking chain

S.Cantwell — Mon, 25 Nov 2019 18:22:32 GMT

Are you using the ESM (on premise version of Traps) or TMS (cloud based)?

With TMS, you go into your Exceptions, determine the hash

This is where I would start to see if this works.

You can also create a policy to ignore/disable the behavioral techniques

Re: Traps is blocking chain

BigPalo — Wed, 27 Nov 2019 09:24:07 GMT

Hi,

We are using ESM 4.1, how can we configure this?. We know that its EoS, we are thinking in upgrade soon.

We want to create only a exception for this expecific script not to all "cmd.exe"