Hi, We have excluded some detected exploits detection IDs from checking after concluding they were false positives. Some of these were done over a year ago and comments weren't included in them when the technician did the exclusions.
My question is whether or not you can view the details of a detection ID as it appears in the global exclusions in Sophos Central? Is that particular ID value decodable somewhere?
thank you.
Hi Ken Kleiner1
You can check under the description of the detected exploit for the path. If an exploit is detected on an application but you're sure the detection is incorrect, you can stop it happening again by using options available in your events list. Also in case, you have SHA-256 you can check further details about the file as mentioned here. For more information please check this link.
Shweta
Hi Ken Kleiner1
You can check under the description of the detected exploit for the path. If an exploit is detected on an application but you're sure the detection is incorrect, you can stop it happening again by using options available in your events list. Also in case, you have SHA-256 you can check further details about the file as mentioned here. For more information please check this link.
Shweta
