hjlbx

General Question - "Block" a File - Action(s)

Recommended Posts

When a file is "blocked," what actions does EAM/EIS apply to that file:

 

1.  moved to Quarantine?

2.  Access Permissions revoked (same as "Terminate and Block" using Process Hacker)?

3.  outbound network activity blocked?

 

Thanks,

 

hjlbx

Share this post


Link to post
Share on other sites

Hello Christian,

 

I see my question, as written, can be misunderstood.  Apologies...

 

I am not experiencing any issues related to EIS blocking a file.  On the other hand, I am interested in learning a bit about File Guard's functionality.

 

Specifically, what does File Guard do to a file when the file is automatically/manually blocked:

 

1.  does it move the file to Quarantine?

2.  does it revoke all of the file's Access Permissions (equivalent to the "Terminate and Block" functionality in Process Hacker)?

3.  does it block the file's outbound network activity?

 

Thanks,

 

hjlbx

Share this post


Link to post
Share on other sites

Hello,

 

this depends on the File Guard settings in our software in the section Protection subsection File Guard option Malware detections:.

 

The default setting is Quarantine with notification. This means the detected file will be moved in the Quarantine section.

 

Because the moved file can't do anything from the Quarantine no more actions are needed.

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.