Adding Individual SHA-256 Values to File Lists
You must have the Malware Defense license for this procedure.
You can submit a file’s SHA-256 value to add it to a file list. You cannot add duplicate SHA-256 values.
Before you begin
-
Right-click a file or malware event from the event view, choose Show Full Text in the context menu, and copy the full SHA-256 value for pasting into the file list.
Procedure
| 1 |
Choose . |
| 2 |
Choose File List from the list of object types. |
| 3 |
Click Edit ( If View ( |
| 4 |
Choose
|
| 5 |
Enter a description of the source file in the Description field. |
| 6 |
Enter or paste the file’s entire value in the SHA-256 field. The system does not support matching partial values. |
| 7 |
Click Add. |
| 8 |
Click Save. |
) next to the clean list or custom detection list where you want to add a file. 
) appears instead, the object belongs to an ancestor
domain, or you do not have permission to modify the
object.What to do next
-
If an active policy references your object, deploy configuration changes.
|
After configuration changes are deployed, the system no longer queries the AMP cloud for files on the list. |