question

MareenDoseindevisGmbH-7036 avatar image
0 Votes"
MareenDoseindevisGmbH-7036 asked JennyFeng-MSFT commented

Application whitelisting with hash values in Defender AV

Can processes and programmes also be excluded via the declaration of hash values in Defender AV? For example whitelisting of self-programmed company applications.

windows-10-security
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

If the reply is useful for you, please accept as answer. It will be helpful to other members who have same questions posting appropriately.

0 Votes 0 ·

1 Answer

JennyFeng-MSFT avatar image
0 Votes"
JennyFeng-MSFT answered JennyFeng-MSFT commented

anonymous user
Hi,

When you add an indicator hash for a file, you can choose to raise an alert and block the file whenever a device in your organization attempts to run it.
You can refer to the following link:
Allow or block file
https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/respond-file-alerts#allow-or-block-file
Hope above information can help you.

============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@JennyFeng-MSFT Thank you for your response. But your answer is related to Defender for endpoints. What about Defender AV only. There I couldn`t find the possibility to use hash values to exclude special applications. Do you also have an answer for this?

0 Votes 0 ·
JennyFeng-MSFT avatar image JennyFeng-MSFT MareenDoseindevisGmbH-7036 ·

Hi,
I feel sorry that this question is hard to answer.
I did not find the relevant information.

0 Votes 0 ·