File Overrides

View or change the current reputation information for files to better control what is allowed or blocked in your environment.

Settings made on the File Overrides page override a file's default reputation. For example, if you have a custom file commonly used in your environment, you can set its reputation to Known Trusted to make sure that it's allowed to run. Likewise, if a file's default reputation is Trusted but you don't want the file running in your environment, you can set it to Known Malicious.

Table 1: Option definitions
Option Definition
Custom Search for files using a custom filter. You can use one of the default filters, or create your own:
  • None
  • Malicious files — Lists files with a malicious reputation. It includes files whose reputation is Known Malicious, Might be Malicious, and Most Likely Malicious.
  • Named files — Lists files that are named.
  • Unknown in GTI — Lists files whose reputation is unknown in Global Threat Intelligence.
  • Unnamed files — Lists files that aren't named.
  • Add... — Create your own custom search filter to view specific rows of data. Click Add... to specify the search criteria to use. The custom filter is named "Unsaved". Click the right arrow next to the Unsaved label, then click Edit to name the custom search filter.
Quick find Search for a specific file name or type of file. You can use search characters * or ?.
Show selected rows Lists only those files that are selected.
Filename(s) Lists the files and their details. Selecting a column heading sorts the list by that information.
Selecting a column heading Select a column heading to sort the information by that type of information. When sorting by any type of reputation, for example by Enterprise or Global Threat Intelligence reputation, the files are listed in this order:
  • Known Trusted
  • Most Likely Trusted
  • Unknown
  • Most Likely Malicious
  • Known Malicious
  • Not Set
Remember: Sorting results appear by reputation value rather than alphabetically. For more information about the values, see Specifying the reputation as a number.
Selecting a file Select a file to see details about it.
Actions See File actions.