cancel
Showing results for 
Search instead for 
Did you mean: 

User-Defined Protection Rule

H ello,

Dear Sirs, I'm creating a custom rule with the unique objective of reporting interaction with java fies. Problem is, I have only a slight idea of how to do it.

I created a user-defined rule with the following properties;

File.

Processes to include: *

Processes to exclude: none

File or folder to block: *.jar; *.java; classes

File actions to prevent: ALL

Report ONLY

The idea is only to know what processes are interacting with JAR files (or any java file for that matter) in order to create a exclusions profile for development enviroments.

Can someone give me a hand on this please?