AnsweredAssumed Answered

Manage goto meeting / webex downloads

Question asked by Mikael Bygren on May 11, 2018
Latest reply on May 11, 2018 by Dameon Welch Abernathy

Hi.

 

How do you manage the different meeting systems download apps?

Sndblast keep alerting in logs as detected but with Severity=Low and Confidence Level=N/A

 

SandBlast Agent Threat Emulation has detected access to: C:\Users\USERNAME\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XXUF8VS0\G2MCoreInstExtractor[1].exe. See attached report

 

I am thinking of changing the "Blade Activition" policy setting for the Anti-Bot agent to ignore Confidence Level=Low. Today it is detect on Low and prevent on High and Medium.

Is a change like that safe, or is it better to keep it as is an filter the events, logs and reports?

Outcomes