Search for Blocked Processes

The Process Search page lets you search for processes that have been affected by a process hash ban. This includes processes that were successfully blocked and those that could not be blocked for various reasons.

Procedure

1. On the navigation bar, click Process Search.
2. Click Add Search Terms and then click Choose Criteria.
   
3. Click Banning and then click Blocked process status.
4. You can select blocked conditions to search for.
   
   To search for successful blocks only, select Process Terminated . To search for other block events, check the boxes for those events. When you have selected all relevant boxes, click Add Terms and run the search. The search results are updated to match your criteria .
   Note: You can manually enter one of the following queries for blocked processes:

   • block_status:processterminated

   • processblock_count:[1 TO *]