Cb Protection mainly classifies files in three ways:
Approved: Files are trusted, and are allowed to run when Cb Protection is in Medium and High enforcement modes.
Unapproved: Files are not trusted, but not explicitly banned. Cb Protection blocks unapproved files from running in Medium or High enforcement mode.
Banned: Files are explicitly untrusted and cannot run in Low, Medium, or High enforcement modes.