Is there any way to use multiple block lists? I'm thinking of a situation where we can have different Block Lists for different groups of assets without the need to use multiple Endpoint servers.
We had a bad hash cause a problem, and we're trying to explore if we can group our assets by criticality to allow us to deploy future hashes in the block list using a staged approach.
Unfortunately there isn't a way to create multiple blocklists in the Elastic Security (formerly Endgame) product. I have logged this as an enhancement request for the Elastic Endpoint integration/kibana Security application. Thank you again for your input & feedback.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.