topic Re: Anti-Malware version MD5 check in Endpoint

Anti-Malware version MD5 check

amit_marx — Thu, 14 Oct 2021 08:42:50 GMT

Hi,

how can I check if the latest Anti-Malware Version we have (8.9.3.1319, DAT Signature 202110140515) include MD5 signature of a ransomware file attack (the ransomware attack that happened yesterday on HILLEL YAFE hospital)

Re: Anti-Malware version MD5 check

Chris_Atkinson — Thu, 14 Oct 2021 22:34:55 GMT

Update checks are typically performed every 2-4 hours depending upon your configuration.

SmartEndpoint > Menu > Tools > Anti-Malware Updates.

Note that it is recommended to activate/deploy additional Harmony Endpoint features to guard against sophisticated attacks.

/Edit: Apologies I misread the original post. Infinity SOC allows you to query our ThreatCloud from an IOC research perspective. Additionally the ThreatWiki can be used to look for specific protections.

Re: Anti-Malware version MD5 check

MikeB — Thu, 14 Oct 2021 16:02:22 GMT

I have the same question. Is there any way to know if an MD5 and/or SHA1 would be detected by the Harmony Endpoint anti-malware blade??