cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Unable to override ATD reputation and re-scan a trusted application

Hi Team,

I would like to analyze an application in ATD which is detected by EDR as malicious. As per VT, the file reputation is 1/67.

The file ATD reputation was set to Known Trusted in TIE server. I am trying to remove the ATD provider reputation and re-scan the application in ATD but it says the file has been whitelisted without analyzing the file.

Is there a way to override the ATD reputation and re-scan the file in ATD?

Thanks in advance.

2 Replies
IMarsh
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 3

Re: Unable to override ATD reputation and re-scan a trusted application

HI Satish_Talatam

If ATD has a built in white list and black list on top of the user white list.

If the built in white list convicted the file, you cannot override this.

If you check in manage>whitelist and see the hash in there, it has been added by a user and can be deleted, then you can rescan the file.

If you find this post useful, Please give it a Kudos! l Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!

Re: Unable to override ATD reputation and re-scan a trusted application

Hi @IMarsh 

We have not added any hash valued under Manage -> Global whitelist.

Please suggest.

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community