Showing results for 
Search instead for 
Did you mean: 

Case sensitivity with Solidcore rules?

ePO 5.9.1 & MAC 8.1

We created a rule group for Powershell which includes the rules below; however, we noticed the paths from each of the events were using a different case, although they have different parent processes. I don't see anything in documentation speaking to case sensitivity...does this matter when I create additional rules?

Execution Control Rule:

Path: C:\Windows\System32\WindowsPowerShell\v.1.0

Patch: c:\windows\system32\windowspowershell\v.1.0

1 Reply
McAfee Employee BEllis
McAfee Employee
Report Inappropriate Content
Message 2 of 2

Re: Case sensitivity with Solidcore rules?

case sensitve shouldnt matter. 

McAfee Support

Benjamin Ellis

Was my reply helpful?

If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

More McAfee Tools to Help You
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • Visit: Business Service Portal
  • More: Search Knowledge Articles
  • ePolicy Orchestrator Support

    • Download the new ePolicy Orchestrator (ePO) Support Center Extension which simplifies ePO management and provides support resources directly in the console. Learn more about ePO Support Center