Need help how Endpoint 10.1 User Defined rules to block registry key should be setup. It's not working.
Registry Blocking (HKCU) Software/CryptoLocker*
File Actions to Prevent: Create Key or Value.
In VSE, you can select HKCU, how do we specify that in ENS10.
See attached screenshot and not working.
It should be: HKEY_CURRENT_USER\Software\Cryptolocker and it worked.