1 Reply Latest reply on Mar 11, 2016 12:19 PM by shakira

    Custom rule: How do I make a negation rule

    c14us

      Hi

       

      I'm trying to make a rule, that will filter out all signed files. And have had little succes doing it.

       

      I have tried to make something a'la:

      Executable { Exclude { -sdn "*" }}

      or

      Executable { Exclude { -sdn "CN=?*" }}

       

      but I can't get it to work.

       

      Have any of you made a rule, that succesfully exclude all Executable with a signer? (and how did you do it :)

       

      Regards

      Claus