Remove Banned Hash in VMware Carbon Black Cloud

Issue

I blocked execution on the move-mouse hash and I want to undo that. How? Where is our blacklisted hash list in Red Canary?

Resolution

With appropriate permissions, you can perform this operation by logging into your VMware Carbon Black Cloud portal:

1. On the left hand navigation pane, select Reputation.
2. By default, you may see the Banned List (if not, select Banned List from the List option to the right of the search field). 
3. Select the checkbox for the entry to which you want to make changes.
4. Click Remove.