Dear Sirs, I'm creating a custom rule with the unique objective of reporting interaction with java fies. Problem is, I have only a slight idea of how to do it.
I created a user-defined rule with the following properties;
Processes to include: *
Processes to exclude: none
File or folder to block: *.jar; *.java; classes
File actions to prevent: ALL
The idea is only to know what processes are interacting with JAR files (or any java file for that matter) in order to create a exclusions profile for development enviroments.
Can someone give me a hand on this please?