The Behavior Monitoring Approved List supports the use of wildcard characters when defining file path, file name, and file extension exception types. Use the following tables to properly format your exception lists to ensure that Apex One excludes the correct files and folders from scanning.
Supported wildcard characters:
-
Asterisk (*): Represents any character or string of characters
-
Question mark (?): Represents a single character
The Behavior Monitoring Approved List does not support the use of wildcard characters to replace system drive designations or UNC addresses.
Exception Type |
Wildcard Usage |
Matched |
Not Matched |
---|---|---|---|
Directories |
C:\* Excludes all files and folders on the specified drive |
|
|
Specific files under a specific folder layer |
C:\*\Sample.exe Excludes the Sample.exe file only if the file is located in any subfolder of the C:\ directory |
|
|
UNC paths |
\\<UNC path>\*\Sample.exe Excludes the Sample.exe file only if the file is located in any subfolder of the specified UNC path |
|
|
File names and extensions |
C:\*.* Excludes all files with extensions in all folders and subfolders of the C:\ directory |
|
|
File names |
C:\*.exe Excludes all files with the .exe extension in all folders and subfolders of the C:\ directory |
|
|
File extensions |
C:\Sample.* Excludes all files with the name Sample and any extension in the C:\ directory |
|
|
Files in specific directory structures |
C:\*\*\Sample.exe Excludes all files located within the second subfolder layer or any subsequent subfolders of the C:\ directory with the file name and extension Sample.exe |
|
|
Complex paths or file names |
C:\Sam*e??.exe Excludes all files with names that satisfy the following conditions:
If a file meets all the required conditions and is located the C:\ directory, Behavior Monitoring excludes the file from scans. |
|
|