Import File Hash Exceptions

You can import file hash exceptions from the from the Endpoint Security Manager or from external feeds.
The Action Center page displays information on files quarantined and included in the allow list and block list. To import hashes from the Endpoint Security Manager or from external feeds, you can initiate an action.
  1. From Cortex XDR, select
    Response
    Action Center
    + New Action
  2. Select
    Import Hash Exceptions
    .
  3. Drag your
    Verdict_Override_Exports.csv
    file to the drop area.
    If necessary, resolve any conflicts encountered during the upload and retry.
  4. Click
    Next
    twice.
  5. Review the action summary, and click
    Done
    .
    Cortex XDR imports and then distributes your hashes to the allow list and block list based on the assigned verdict.

Recommended For You