Just Published! Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

App Control: How to Use Wildcards in Custom Rules

App Control: How to Use Wildcards in Custom Rules

Environment

  • App Control Console: All Supported Versions
  • App Control Agent: All Supported Versions

Objective

This article provides wildcard usage within Custom Rules.

Resolution

App Control recognizes the following wildcard characters:
  • Multiple Characters: *
    Example: C:\ProgramData\AccountingSoftware\*.dll
  • Single Character: ?
    Example: C:\ProgramData\AccountingSoftware\version??.??\*.dll
  • Ending a Path: Ending a path with a backslash will be recursive through all files, folders, and subfolders. The two paths in the example below would be identical
    Example One: C:\ProgramData\AccountingSoftware\
    Example Two: C:\ProgramData\AccountingSoftware\*
  • Specifying a Directory: App Control will treat any path that does not end with a backslash as a file name.
    Valid Directory: C:\ProgramData\AccountingSoftware\
    Not a Valid Directory: C:\ProgramData\AccountingSoftware

Additional Notes

  • System Variables (%username%) are not recognized by App Control.
  • Wildcards are not allowed inside of macros.
  • Any path that has no slash or drive letter has "*\" (for Windows) or "*/" (for Mac and Linux) added at the beginning of the path.
  • Case Sensitivity of paths is dictated by the Operating System. Windows and macOS systems are not normally case sensitive.
  • More information can be found in the User Guide chapter, "Custom Software Rules" found on VMware Docs > Server Documentation > User Guide.

Related Content


Labels (1)
Tags (2)
Was this article helpful? Yes No
50% helpful (1/2)
Article Information
Author:
Creation Date:
‎02-15-2019
Views:
1696
Contributors