SentinelOne Detects Backup Agent Executable as Malware

Situation

Backup Agent executable file (Online Backup.exe) is blocked by the SentinelOne anti-virus software after Backup Agent is installed.

Cause

The SentinelOne anti-virus software identifies Online Backup.exe as a malicious file.

Solutions

Add the Online Backup.exe file to the exclusion list in SentinelOne.

Select the best option for you:

• Add exclusion from a detected item
• Add exclusions before detection
  • Option 1: Exclusion by thumbprint
  • Option 2: Exclusion by a path to the installation folder

Add Exclusion from Detected Item

1. From SO Level, expand Integrations -> EDR -> Analyze.
2. Locate the detected Online backup.exe file and click it.
3. Select More in the upper right corner, then select the Mark as benign action for Online Backup.exe.

Add Exlusion Before Detection

1. Under Path, select New Exclusion.

2. Under Exclusion Type, select Path.
3. In the OS drop-down list, select Windows.
4. Enter the path to the Backup Agent installation folder, then select Include Subfolders.
5. Select More Options, then select Suppressed All.
6. Enter a description for the exclusion.
7. Click Save.