Thumbprint Registry key location - Intercept X

Question

Hi everyone, 
 We are in the process of testing the migration from On-Premise Endpoint with Exploit Prevention & moving over to Central with Intercept X. We have a few problem applications that we have built up a thumbprints registry file for. 
 The registry key location we have been using for these thumbprints is HKEY_LOCAL_MACHINE\SOFTWARE\HitmanPro.Alert\ with a string of REG_MULTI_SZ of "UserThumbprints" 
 I have seen some posts on the Intercept X forums for thumbprints under HKEY_LOCAL_MACHINE\SOFTWARE\HitmanPro.Alert\ with a string of "WhiteThumbprints" 
 Can you confirm that Intercept X uses "WhiteThumbprints" rather than "UserThumbprints" used in Exploit prevention as we will need to modify quite a few machines if this is the case . 
 Thanks 
 Richard

Barb@Sophos · Accepted Answer

Hi Richard, 
 You can add exclusions via Sophos Central. Please navigate to System Settings > Global Scanning Exclusions > Add Exclusions > Detected Exploits (Windows) and select the detections you would like to exclude from scanning. 
 For Exploit Mitigation exclusions navigate to: System Settings > Exploit Mitigation Exclusions This article provides further information and details. Intercept X: How to report false positives 
 Regards,

jak · Answer

I've added a few to my Win 10 EP via Central and I have: HKEY_LOCAL_MACHINE\SOFTWARE\HitmanPro.Alert\ WhiteThumbprints 
 Regards, Jak