Feature Request 12.1 - Malware exclusions of a path

[cpw2024]

Hello,

Would it be possible to consider this as a feature request:

As a business we use Sophos and other software, these have a .purge, .wizard and other files as standard which is being picked up by 12.1 malware detection. These files are also a known extension for malware and virus'. Is it possible to exclude a path en mass rather than checking each file location on alert/detection?

Kind regards,

Clair

[Dima P.]

Hello Clair,

Path exclusion functionality is planned for next versions. Meanwhile you can exclude entire extension from processing (and if you have the latest 12.1.1 update you can do that directly from malware event properties).

We've also agreed to adjust the thresholds for .purge extension and raise alert when several files which such extension has been picked up. .wizard extension is being currently reviewed!

Thank you for your post!