For certain notifications, standard file bans might not provide the best remediation. The Carbon Black App Control Connector offers several other rules to control actions that are identified as suspicious.
These rules can be created from the External Notification Details page with some of the rule data pre-populated.