Dameon Welch-Abernathy

Files are randomly not getting scanned and emulated by Threat Emulation

Discussion created by Dameon Welch-Abernathy Employee on Apr 25, 2017

When using exceptions in the Threat Prevention profile, it's possible that some files randomly will not get scanned and emulated by Threat Emulation. This happens when an exception is less specific than the Threat Emulation rule and the "Inactive" action is used.

 

This is a configuration error that can be corrected by following this SK: Files are randomly not getting scanned and emulated by Threat Emulation

Outcomes