¿Cómo desactivar alertas de elementos bloqueados por Advanced EPDR/EDR?

By April 30, 2020November 3rd, 2022EDR, EPDR, Soporte
+34 900 840 407
support@cytomic.ai

¿Cómo desactivar alertas, añadir exclusiones y ver elementos bloqueados por Advanced EPDR/EDR?

Related Products_
  • Advanced EPDR
  • Advanced EDR

This article explains how to disable sending email alerts whenever Advanced EPDR/EDR blocks unknown items and where you can find extended information on the blocked item.

How to disable email alerts for blocked items
If you wish to stop receiving email alerts altogether every time an item is blocked, go to Settings, select My alerts from the left menu and disable the checkbox A program that is being classified is blocked, for example. You can select any other alert that you do not wish to receive from the given options.
How to view information related to the blocked items
To know the detail of the blocked item, follow the steps below:
  1. Click the Currently blocked items being classified activity dashboard at the Advanced EPDR/EDR web console.
  2. Locate the specific item by name of the application or affected computer and click on it.
  3. Should this item be necessary for the activity of your company, you may, under your responsibility, unblock it until its classification is completed. You can do so by clicking the element and selecting option Do not block again.
NOTE: If the blocked item is not displayed on the list of blocked items, it is likely that the item has already been classified. Access the History option to see the detail of items classified as goodware or malware. Please note that the earliest record dates back from 10th April 2016.
In the case of classification of blocked items as malware, you can also check the detail from the Malicious programs or Potentially Unwanted Programs activity dashboards.
Additional information
For further information on Advanced EPDR/EDR, check the online help and the Advanced Administration Guide available from the console.
+34 900 840 407
support@cytomic.ai