LIVEcommunity - Who Me Too'd this topic

Hi Team,

On analysing an ransomware incident, i have block the hash of malicious file and added the file path of malicious file into IOCs. However i can see the alerts for malicious hash in the Critical alert (IOCs based) and Low alert - Administrative Hash Exception.

I have check allow list of IOCs and global exeception, but there was no exception for the malicious Hash.

Who Me Too'd this topic

L0 Member

Me Too date:

Unlock your full community experience!

Who Me Too'd this topic

Malicious Hash detected as Adminstrative Hash exception