Add a file path to a malware profile allow list

Requires Cortex XSIAM Enterprise, Premium, or any other XSIAM license that includes endpoints or Cortex Cloud Runtime Security.

During investigation, if you deem a file path to be safe, you can add the file path to an existing malware profile allow list directly from the **Issues** table.

1. In the **Issues** table, select the **Initiator Path**, **CGO path**, and/or **File Path** field values you want to add to your malware profile allow list.
2. Right-click and select **Add \<path type> to malware profile allow list**.
3. In the **Add \<path type> to malware profile allow list** dialog, select from your existing **Profiles** and **Modules** to which you want to add the file path to the allow list.
4. (Optional) View your Malware profile allow list.
 1. Go to **Inventory → Endpoints → Policy Management → Prevention → Profiles** and locate the malware profile you selected.
 2. Right-click, select **Edit Profile** and locate in the **Files / Folders in Allow List** section the path file you added.

For more information about malware prevention profiles, see **Set up malware prevention profiles**.