Sample Removal Request

Unique samples sent to the WildFire cloud for analysis can be deleted at the discretion of the user. This allows users who are subject to data protection policies, including those who must comply with GDPR, to permanently dispose of sample data based on their organization’s retention policies. Sample data includes session / upload data and the sample file itself.
  1. Create a text file with a list of SHA256 or MD5 hashes of the samples to be deleted. Each hash must be on an individual line in the file and can include up to 100 samples.
    Only files that are unique to your environment can be deleted. If files are found to be available in other public or private feeds, only the session and upload data for a given account is removed.
    hash-list.png
  2. Log in to the WildFire cloud using your Palo Alto Networks support credentials or your WildFire account.
  3. Select
    Settings
    on the menu bar.
  4. Click
    Choose File
    and select the hash list text file that you created in step 1 and then
    Remove Samples
    . You will receive a confirmation upon a successful file upload.
    remove-samples.png
  5. After the samples are removed from the WildFire cloud, you will receive a confirmation email with the details of the request. This includes a list of the samples that were requested to be deleted, and the removal status of each sample. This process can take up to 7 days.
    sample-delete-email.png
    Samples that do not exist or are not unique to your environment will return statuses of
    Not found
    and
    Rejected
    , respectively.

Related Documentation