You can use System Lockdown to do this for you.
If you have proper IoC's you can use the Blacklisting to incorporate this easily within your whole environment.
Setting up System Lockdown at the beginning is a bit of work to activate it on every group (if inheritance is deacxtivated), chose the right ****.
Later you can use the **** Update mechanism in SEPM to update the **** centraly outside of SEPM and add or remove IoC's.
One Hash per line.
Read carefully throught the recommendations and try it ...
Configuring system lockdown
Original Message:
Sent: May 09, 2025 06:56 PM
From: Special Nicholas
Subject: Hashes
Can anyone please advise how to block or **** malicious hashes?
If yes, can please share the steps.