Managing Organization Never Scan Lists for Anomali Copilot

ThreatStream Org Admins can create and manage an organization Never Scan list for users in their organization who use the Anomali Copilot browser extension, formerly known as Lens + browser extension. For more information, see https://www.anomali.com/products/copilot.

Note: Existing Lens+ users can also manage their organization Never Scan list on the Copilot tab.

The Never Scan list prevents users from scanning the domains, IP addresses, or URLs you configure. Entries on the organization-level list cannot be edited or deleted.

To add entries to your organization Never Scan list:

  1. In the bottom-left corner of the side navigation panel, click > ThreatStream and then click Copilot.

  2. Click Add in the Actions menu.

  3. Add the domains, IP addresses, or URLs you want to prevent users in your organization from scanning. If entering multiple entries, separate each entry with a new line or comma.

  4. Click Add.

The entries have been added. The organization Never Scan list synchronizes with Anomali Copilot every 10 minutes.

To delete entries from your organization Never Scan list:

  1. In the bottom-left corner of the side navigation panel, click > ThreatStream and then click Copilot.

  2. Navigate to the Copilot tab.

  3. Select the entries you want to delete.
  4. Click Delete in the Actions menu.

The entries have been deleted.