Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.
Sounds like A to me:
Falcon allows you to upload hashes from your own black or white lists. To enabled this navigate to the Configuration App, Prevention hashes window, and click on “Upload Hashes” in the upper right-hand corner. Note that you can also automate the task of importing hashes with the CrowdStrike Falcon® API.
@plantvast - I think you might be wrong because you cannot block IPs and domains, only hashes in the IOC + as written in the policy section "Block processes matching hashes that you add to IOC Management with the action set to "Block" or "Block, hide detection".
You can actually add hashes, domains and IP addresses on IOC management. Navigate to the page in Falcon and attempt to a new indicator and the options will appear.
you are right and wrong my friend, adding IPs and domains in the IOC is indeed possible, but not with "block" action on them - only "detect" or "no action".
from the "Custom Blocking" policy section - "Block processes matching hashes that you add to IOC Management with the action set to "Block" or "Block, hide detection".
Custom blocking in prevention policies referes to hashes, ips, and domains added to IOC Management.
upvoted 1 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
diegofretesc
6 months, 1 week agoManuneethi
9 months, 1 week agosbag0024
10 months, 1 week agoMSKid
10 months, 3 weeks agoFerbOP
12 months ago3xploit
1 year agoim2ca
1 year agotestmailuc
1 year, 1 month agoJek88
1 year, 2 months agotestmailuc
1 year, 1 month agokgbac
1 year, 2 months agotestmailuc
1 year, 1 month agoShuliAbba
1 year, 2 months agoplantvast
1 year, 2 months agoShuliAbba
1 year, 2 months agoShuliAbba
1 year, 2 months agoplantvast
1 year, 3 months ago