The DASCLI abstate command changes the AB state of all instances of a file or hash identifier on an endpoint to a given state.

Authentication is required to use this command. 

Parameters

dascli abstate state {file_name | hash} [quarantined]

state
approved
Locally approve this file.
unapproved
Unapprove this file. The unapproval persists. Any approvals are removed.
installer
Mark this file as an installer. A change in the local state is also reflected on the server.
file_name
Full path and name of the file. Wildcards can be used.
hash
Hash identifier of the file. The state will change for all instances of that hash on the endpoint.
quarantined

Quarantine this file.