cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2796
Views
0
Helpful
0
Replies

AMP for Endpoints - Quarantine failures on download temporary files

coreytouchet
Beginner
Beginner

Can some kind dev fix the issue where when a file is fully downloaded AMP triggers on a signature on the file.crdownload or whatever your browser du jour decides to temp name downloads, but before AMP can act the browser renames it to the correct file.

 

So the quarantine failure messages have essentially become littered with this message and it's hard to digest a true failure from this without complicated SIEM rules.

0 Replies 0
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers