Add a file path to a malware profile allow list - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

Cortex XSIAM Documentation
Product
Cortex XSIAM
Creation date
2024-03-06
Last date published
2024-10-13
Category
Administrator Guide
Abstract

You can add a file path to an existing malware profile.

You can add a file path to an existing malware profile allow list directly from the Alerts table.

  1. In the Alerts table, select the Initiator Path, CGO path, and/or File Path field values you want to add to your malware profile allow list.

  2. Right-click and select Add <path type> to malware profile allow list.

  3. In the Add <path type> to malware profile allow list dialog, select from your existing Profiles and Modules to which you want to add the file path to the allow list.

  4. (Optional) View your Malware profile allow list.

    1. Navigate to Endpoints → Policy Management → Prevention → Profiles and locate the malware profile you selected.

    2. Right-click, select Edit Profile and locate in the Files / Folders in Allow List section the path file you added.