How to Local whitelist a file using AllowList?

Purpose:

This article provides a step-by-step guide on how to whitelist a file using the allowlist feature in MetaDefender Core.

When to Use:

Local whitelisting is recommended when the user has verified and fully trusts the file, even if it is flagged by antivirus engines. This method is especially useful in environments where trusted internal tools or utilities are mistakenly identified as potentially harmful.

Scenario:

In this use case, we will use a text file containing the EICAR test string as the sample file.

Steps to Allowlist a File

1. Access Your Workflow: Navigate to the workflow used for your scanning session in MetaDefender Core.
2. Open the Allowlist Tab: Select the Allowlist section from the workflow settings.
3. Allow by Hash: Add the hash value of your trusted file to the Allowlist by Hash section.

Result:

Once added, the file will be recognized as allowlisted during future scans and will not be flagged by AV engines configured in your workflow.