Endpoint (Traps) Discussions
cancel
Showing results for 
Search instead for 
Did you mean: 
Endpoint (Traps) Discussions
About Endpoint (Traps) Discussions

Welcome to the Endpoint discussion forum! We encourage you to ask questions, propose solutions, and collaborate on ideas to better secure your endpoints with Traps.

Forum Posts

[Traps] Whitelist a Target Hash

Good Morning All, I am investigating ways to whitelist a target hash from generating alerts, rather than the proccess hash. We have a business requirement, where known proccesses (Excel, Word etc) are spawning scripts from other locations. Is there a...

Traps 5 - reporting False Positives

Hi all, me again... I have made some submissions on files I believe to be benign or greyware, my questions is in Traps 5 how do I know and where do I find the outcome of the WF results based on a submission? Because in 4x you could refresh it and the...

BizBo by L2 Linker
  • 609 Views
  • 0 replies
  • 0 Likes

Traps 5

Hi, we have the anti-malware scanning, but I cannot seem to find a location in the polices to stop Traps scanning certain files C:\Pagefile.sys, c:\hiberfil.sys etc. I have added them into the Whitelist Folders but they still get scanned. Any ideas? ...

BizBo by L2 Linker
  • 1742 Views
  • 5 replies
  • 0 Likes

TRAPS VDI Tool - CSV file upload failed

ESMCore: 4.1.4ESMConsole: 4.1.4Agent: 4.1.4VDI Tool: 4.1.4SigCheck: 2.60 Hi there, we followed the TRAPS manual for the installation on a VDI Master Image (Windows 10 v1709 Enterprise).We used the TRAPS VDI Tool to upload the generated SigCheck CSV f...

image.png
ATB-Adm by L1 Bithead
  • 3650 Views
  • 9 replies
  • 0 Likes

Payload missed

Ladies & Gents, I created a x64 payload.exe (internal testing) this payload creates a reverse_tcp on port 4444. So I uploaded my 'payload.exe' to my test machine with Traps 4.1.3 (39-2454 Content). Thinking, Traps will shut this down, to my horror it...

BizBo by L2 Linker
  • 2285 Views
  • 11 replies
  • 0 Likes

Resolved! 4.1.4 upgrade failed

I tried to run ESMcore update to 4.1.4, but it ended up with "cannot access file, check permissions" -type of failure. Of course I did not take note of the exact filename. There was rollback option, so I prssed that.Now my clients cannot connect to m...

Resolved! Will there be Traps 5.0 on-premises?

Hi, im new to Palo Alto Traps and im just getting familiar with it. I want to do a Training for 4.1 and someone told me not to do that because of 5.0.As far as i understand, 5.0 is the cloud based solution but for me only the on-premises way is impor...

Murat89 by L0 Member
  • 796 Views
  • 2 replies
  • 0 Likes
Top Liked Authors