Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
MikeB
Advisor

Block files based on hash with SandBast Agent

Is there a way to block files in SBA based on hash or some IoC? 

6 Replies
PhoneBoy
Admin
Admin

At the moment, there doesn't seem to be a way to block files in SBA based on some sort of file hash/ip/URL.
You may want to engage with your local office around this requirement.
Kannan_R
Participant

Hello @PhoneBoy and experts, I would like to know if this feature is still not available? If not, is it in the pipeline / can we expect it anytime sooner?

 

Thanks,

Kannan

0 Kudos
PhoneBoy
Admin
Admin

@Kobie_Bendalak can you comment on this?

0 Kudos
Kannan_R
Participant

Hello Experts,

          Would it be possible to get an update on this?

BR

0 Kudos
MikeB
Advisor

Currently, you can do a "File Remediation" Push Operation to  move files to quarantine based on MD5/File Path/ Incident ID. this is totally reactive than preventive but works in most escenarios.

 

image.png

0 Kudos