Endpoint Protection

I'd like to delete a particular file, an EXE file.

I know its hash and I've monitored it through application monitor.

How could I delete it on my clients even if it's not opened/used/modified? I just want to delete it if it's present on the client.

I think to act like this:
1) application exception with file signature with quarantine or remove action
2) execution of scan on the clients

My concern is: will an "on demand" scan use the application exception indication?
Is there another and smarter way to obtain this?

SEP can't delete files. This is beyond the scope of what SEP can do.

Uhm... if I can add an application exception with a specific hash and assign delete action on it, I think SEP will delete that one when the user launch it.

So SEP could delete files but probably this action is performed only if that file is launched.

The file would need to be "actioned" It's not just going to be deleted if it is sitting there.

You can do it if you have SNAC.

Ok thanks.

I've successfully deleted it (as said, when the file is launched) with application exception.
I can verify the result in the SONAR section of Monitoring tab.