Decoy Notifications

SMSystems

We have enabled Decoy files on a lot of endpoints and this seems to be generating false positives.

Is there a way to prevent these from being sent or at least categorically identify these as decoy detections and avoid unnecessary notifications?

Notification details as follows:
Name: Trj/RansomDecoy.A
Path: TEMP|\489314D86C55A948A225789DB7A93229_000000004D5F663E.tmp
Hash: 865C0C0B4AB0E063E5CAA3387C1A8741

David_Carro

I have just send a PM to you, let me know if you do have any further issues.

David

Cicciopalla

Hi, we're having the same issue. How was it resolved?

Kind regards,

Alessandro

David_

Hi, Cicciopalla.

I have just sent you a PM.

David

BillyBrannum153

I have the same issue with Panda,

Carmen_Gomez

Hi BillyBrannum153,

I am sending you a PM

Regards,

mchaves

I have the same issue

David_

Hi, mchavez
PM sent.
Let us know if there are further issues.

Rosa

Hi mchaves

I am sending you a PM

Regards,

Rosa

PSI923511

Hi,

we have the same messages on endpoint protection clients.

Regards,

Mark

Carmen_Gomez

Morning,

Anyone experiencing this issue please open a case with support by sending the query to [email protected]

Thanks for your collaboration.
Regards,

ottl05

We´ve got the same "problem".
So it´s still not resolved.

David_Carro

Hi, ottl05,

Please send an email requesting support to:
[email protected]

so we can study your case in depth.

Kind Regards,

David

KLAW

@David_Carro said:
Hi, ottl05,

Please send an email requesting support to:
[email protected]

so we can study your case in depth.

Kind Regards,

David

Hi David,

I'm having the same issue. Should I send you a PM or send a email to [email protected]?

Thanks!

james.carson

Hi @KLAW
Sending an email or opening a support case via the support center button at the top of this page will get you in contact with the support team. if you're experiencing this issue, please do which ever method you prefer.