QuestionQ202Verified/Policy ApplicationCopy linkReport a problemAsk AstroTutorSave questionWhich of the following statements applies to Custom Blocking Prevention Policy settings?AHashes must be entered on the Prevention Hashes page before they can be blocked via this policyBBlocklisting applies to hashes, IP addresses, and domainsCExecutions blocked via hash blocklist may have partially executed prior to hash calculation process remediation may be necessaryDYou can only blocklist hashes via the APIShow AnswerAnswerExplanationCustom Blocking blocks processes that match hashes previously added to IOC Management with a blocking action. This requirement corresponds to adding the hashes on the Prevention Hashes page in the terminology used by the choice. The setting is hash-based, not an IP-address or domain blocklist, and it is not API-only.Learn moreCrowdStrike Developer Center — Windows Prevention PolicyShow comments10Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion