False Positive (GitButler)

[P.Kolberg]

All versions of GitButler are falsely flagged by Cortex XDR.

The corresponding GitHub issue can be found here: https://github.com/gitbutlerapp/gitbutler/issues/3518

The hash is related to version 0.11.1

Component: WildFire
Cortex XDR code: C0400055
Hash: c76d86368be3331901ab4371c8e497734eaacf7f76a2967cf3bf1054c2081993

[jtalton]

Hi P.Kolberg,

You may report the Wildfire Verdict as incorrect and add an allow rule until the verdict is changed. 

The directions are outlined in these Live Community posts:

Solved: LIVEcommunity - How to Enable Report verdict as Incorrect Option in Cortex XDR - LIVEcommuni...

(paloaltonetworks.com)

Cortex XDR How-to Video: Manage File Execution | Palo Alto Networks LIVEcommunity

Thank you