The Process Search page lets you search for processes that have been affected by a process hash ban. This includes processes that were successfully blocked and those that could not be blocked for various reasons.

Procedure

  1. On the navigation bar, click Process Search.
  2. Click Add Search Terms and then click Choose Criteria.
    The choose criteria menu displaying the available criteria
  3. Click Banning and then click Blocked process status.
  4. You can select blocked conditions to search for.
    The add search terms displaying the drop-down menu for the blocked process status
    To search for successful blocks only, select Process Terminated . To search for other block events, check the boxes for those events. When you have selected all relevant boxes, click Add Terms and run the search. The search results are updated to match your criteria .
    Note: You can manually enter one of the following queries for blocked processes:

    • block_status:processterminated

    • processblock_count:[1 TO *]