This article is based on SentinelOne community documentation last updated on Feb 24 2025
Exclude a file based on its SHA-1 hash and /or its SHA-256 hash.
With this exclusion type Agents suppress (do not create) alerts and do not mitigate detections. Agents monitor the files and processes.
SHA-256 support
SHA-256 hash signatures are supported by default from version S-25.1.1.
SHA-256 hash enforcement is supported on Windows and Linux Agents 24.2 and later, and macOS Agents 24.3 and later.
Procedure: Create a Hash Exclusion Manually from Guardz
Go to Security Controls> Endpoint Security > SentinelOne Exclusions
Click the "+" button to add an exclusion
Choose the Exclusion Type and select Hash.
In OS Type, select the operating system for the exclusion.
Optional: In Description, enter a phrase to make it easy for you and other users to identify this exclusion and understand why it is needed.
Click Add.