cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
JeromeCA
Level 7
Report Inappropriate Content
Message 1 of 6

Add IOC SHA-256

Hello,

Our security teams provide us a list of IOC with only SHA-256 informations.

How I can add this IOC list ? My environnement is based on ePO 5.10 and ENS10.7

BR

 

5 Replies
Pravas
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 6

Re: Add IOC SHA-256

Hi @JeromeCA ,

MD5 values can be used with Access Protection to block any processes. SHA-256 values are not supported at this time.

You may open a ticket with Support with the following details.

1) Hash list 

2) Any Blog/URL/Advisory referencing the hashes as malicious.

 

Thanks

 

Was my reply helpful?
If you find this post useful, Please give it a Kudos! Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!

JeromeCA
Level 7
Report Inappropriate Content
Message 3 of 6

Re: Add IOC SHA-256

I have only sha-256 value, no other information....☹️

 

BR

Pravas
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 4 of 6

Re: Add IOC SHA-256

Hi @JeromeCA ,

No problem, We can verify the coverage status for you.

Please create a ticket by logging into the support site.

https://support.mcafee.com/

Thanks

 

 

Was my reply helpful?
If you find this post useful, Please give it a Kudos! Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!

JeromeCA
Level 7
Report Inappropriate Content
Message 5 of 6

Re: Add IOC SHA-256

If I provide you only the sha-256 , you Can check if it's covered by default ?

BR

KevRas
Level 7
Report Inappropriate Content
Message 6 of 6

Re: Add IOC SHA-256

I reported a SHA-256 and URL to McAfee Threat Labs and they were unable to find the file on the website. I was unable to block the SHA-256 has as the file was deleted and no MD5 Hash was produced. I need to block a SHA-256 using ENS modules across my entire network.

 

How can we get a PER going to add a SHA 256 Hash column to any of the ENS modules to block?

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community