What is a Well Known File?

Well Known Files are files identified as being distributed by reputable software vendors in widely used operating systems and programs, such as Windows 11 Pro and macOS 14 Sonoma. These files are stored in the Stairwell Well Known Files environment, managed by Stairwell.

Key Details:

• Tagging:
  In the Stairwell app, well known files are tagged with tooltips that indicate their origin.
  • Example: “This file has sightings in Stairwell Well Known Files on Windows 11 Pro.”
• Filtering for Efficiency:
  You can filter well known files out of Search and Run to Ground results to reduce noise and expedite threat investigations.
• Reputation Indicator:
  A file’s well known status reflects the reputation of its distributor. However, it does not imply an assessment of the file's trustworthiness or safety.

By leveraging well known file identification, your organization can streamline their investigations by focusing on unknown or suspicious files while reducing unnecessary noise.