Blocking executions without showing any alerts

[Shashanksinha]

Hello , is there any way in cortex XDR to block executions without whitelisting/blocking the hash/file path and not get

any incident or alert and at the same time.

[bbarmanroy]

Hi @Shashanksinha what is the use case that you're trying to achieve? It'd be ideal to get notified if a certain flagged binary is executed on endpoint fleet for action owners to perform appropriate investigation, containment and remedial actions.