Add multiple allowed Applications after false Positiv Outbreak

Hey!

is there any other way to add allowed applications than going through all of them one by one?
Sophos just detected hundreds of PUAs on one of our file servers, but they are all false positives.
(Sophos ML doesn't seem to like industrial companies Rolling eyes).
Since these files aren't signed, I can't use a certificate and the names and sha are also different for each file.

With best regards
Lukas

Parents Reply Children
No Data