This is only for members of the University of Maryland community, users outside of UMD please contact Crowdstrike support directly.

In certain rare circumstances Crowdstrike may mark a program as malicious and quarantine a file for a program that is not malicious. For example, many third party software update functions behave similarly to malware that is attempting to modify a program.

If this happens you can reach out to the Division of IT Security Consulting group who can mark the program as a false positive and have any quarantined files restored. Crowdstrike's default procedure is to alert or quarantine a file and not delete it.

Send an email with the following information to ITSec-Consulting@umd.edu.

1. Machine Name.
2. Name of program in question.
3. File name and location with the full folder path.