Managing and Monitoring Hash Bans

This section describes how to manage and monitor hash bans.

After you begin banning process hashes, several options are available for managing and making use of bans. You can:

• View data about bans on the Manage Banned Hashes page. See Manage Banned Hashes.
• View block events on the Process Analysis page. See To view all block events for a parent process:.
• Enable alerts and syslog event recording for process blocks caused by bans, using the Banning Events feed on the Threat Intelligence Feeds page. See Enabling Alerts and Syslog Output for Banning Events.
• Monitor banning alerts on the Triage Alerts page. See To view banned hash alerts:.
• Enable and disable bans on the Manage Banned Hashes page. See Disable a Hash Ban.