The first ** is intended to match \\Device\Volume0\ or C:. There is a single * that is intended to match multiple releases number. So this would omit "mscorsvw.exe" from many different folders.
If we do * in the end - that would be anything within a directory. e.g. **\Program Files\Custom App Suite\*
If we do ** in the end - that matches anything within the subtree. e.g. **\Program Files\Custom App Suite\**
Application Path Rules – different notations:
The following 3 types of notations are supported (this is Mac/Unix example):
1.) File notation:
Note: This is a simple case. The rule will apply only to the single file/application.
2.) Directory Prefix notation:
Note: This type of rule will apply to all files and subdirs in a folder recursively. Using the directory prefix notation is the easiest way to apply a rule to all files in a folder and all sub-folders, without using the more complicated Glob Matching notation.
Note the trailing path separator to indicate a directory. This is a preferred way of defining a rule to an equivalent Glob Matching / wild-card notation (better performance on the sensor and good practice to minimize * and ** if possible).
3.) Glob Matching / Wild-card notation:
The glob matching notation contains at least one single * or double ** asterisk.
A single * asterisk will match everything up to the next path separator. It can be applied to generalize a folder or file name.
Example: c:\Program Files\Visual Studio 8\*.exe
Note: Applies to all files with .exe extensions in c:\Program Files\Visual Studio 8 folder.
Example: c:\Program Files\Visual Studio*\*.exe
Note: Applies to files with .exe extensions, in c:\Program Files sub-folders with names starting with “Visual Studio”
A double ** asterisk will match everything across multiple path separators, until a match is found. Typically, ** is used to apply a rule to files in sub-directories recursively.
Example: **\Program Files\Visual Studio\**
Note: Applies to all files in C:\Program Files\Visual Studio and its sub-folders.
Example: **\Visual Studio\**
Applies to all files in Visual Studio folder and its sub-folders, regardless of the location of the Visual Studio folder.
Single * and double ** asterisks can be combined to form a single rule:
Note: This rule applies to all files in my_dev_tools folder and sub-folders, for any user.
Note: Applies to all files in any user’s Desktop/build folder and sub-folders.
Note: If build folder resides in a less defined location, use more * or ** in the middle of the path. Applies to all files under the build folder, at any mount point, multiple levels under dir1
Note: If location is completely fixed, it is possible to use either of:
/build/ (using the Directory Prefix notation) or /build/** ( equivalent to /build/ but using Wildcard Match notation)
It is possible to apply a rule to a specific file, regardless of location: