Views:
The syntax lists included in this topic are used for creating inclusion and exclusion lists. You can create these lists within Policies → Common Objects or when configuring Anti-Malware inclusions and exclusions in the Policy or Computer editor. For more information on where to use the syntax, view the following topics:
Related information

Syntax for directory lists

Note
Note
Directory list items accept either forward slash "/" or backslash "\" to support both Windows and Linux conventions.
Exclusion
Format
Description
Examples
Directory
DIRECTORY\
Excludes all files in the specified directory and all files in all subdirectories.
C:\Program Files\ Excludes all files in the "Program Files" directory and all subdirectories.
Directory with wildcard (*)
DIRECTORY\*\
Excludes all subdirectories except for the specified subdirectory and the files that it contains.
C:\abc\*\: Excludes all files in all subdirectories of abc, but does not exclude the files in the abc directory.
C:\abc\wx*z\
  • Matches C:\abc\wxz\, C:\abc\wx123z\
  • Does not match C:\abc\wxz, C:\abc\wx123z
C:\abc\*wx\
  • Matches C:\abc\wx\, C:\abc\123wx\
  • Does not match C:\abc\wx, C:\abc\123wx
Directory with wildcard (*)
DIRECTORY*\
Excludes any subdirectories with a matching name, but does not exclude the files in that directory and any subdirectories.
C:\Program Files\SubDirName*\: Excludes any subdirectories with a folder name that begins with “SubDirName”. Does not exclude all files under C:\Program Files\ or any other subdirectories.
Environment variable
${ENV VAR}
Excludes all files and subdirectories defined by an environment variable. For a Virtual Appliance, the value pairs for the environment variable must be defined in Policy or Computer Editor > Settings > General > Environment Variable Overrides.
${windir}: If the variable resolves to C:\Windows, excludes all the files in C:\Windows and all its subdirectories.
Comments
DIRECTORY #Comment
Adds a comment to your exclusion definitions.
c:\abc #Exclude the abc directory

Syntax of file lists

Exclusion
Format
Description
Example
File
FILE
Excludes all files with the specified file name regardless of its location or directory.
abc.doc
Excludes all files named abc.doc in all directories. Does not exclude abc.exe.
File path
FILEPATH
Excludes the single file specified by the file path.
C:\Documents\abc.doc
Excludes only the file named abc.doc in the Documents directory.
File path with wildcard (*)
FILEPATH
Excludes all the files specified by the file path.
C:\Documents\abc.co* (for Windows agents only)
Excludes any file that has file name of abc and extension beginning with .co in the Documents directory.
Filename is a wildcard (*)
FILEPATH\*
Excludes all files under the path and its subdirectories.
C:\Documents\*
Matches:
C:\Documents\file.exe
C:\Documents\SubDir1\file1.exe
C:\Documents\SubDir1\SubDir2\file2.exe
C:\Documents\SubDir*\*
Matches:
C:\Documents\SubDir\file.exe
C:\Documents\SubDir1\SubDir2\file2.exe
Does not match:
C:\Documents\SubDir.exe
C:\Documents\Sub\file.exe
File with wildcard (*)
FILE*
Excludes all files with a matching pattern in the file name.
abc*.exe
Excludes any file that has prefix of abc and extension of .exe.
*.db
Matches:
123.db
abc.db
Does not match:
123db
123.abd
cbc.dba
*db
Matches:
123.db
123db
ac.db
acdb db
Does not match:
db123
wxy*.db
Matches:
wxy.db
wxy123.db
Does not match:
wxydb
File with wildcard (*)
FILE.EXT*
Excludes all files with a matching pattern in the file extension.
abc.v*
Excludes any file that has file name of abc and extension beginning with .v.
abc.*pp
Matches:
abc.pp
abc.app
Does not match:
wxy.app
abc.a*p
Matches:
abc.ap
abc.a123p
Does not match:
abc.pp
abc.*
Matches:
abc.123
abc.xyz
Does not match:
wxy.123
File with wildcard (*)
FILE*.EXT*
Excludes all files with a matching pattern in the file name and in the extension.
a*c.a*p
Matches:
ac.ap
a123c.ap
ac.a456p
a123c.a456p
Does not match:
ad.aa
Environment variable
${ENV VAR}
Excludes files specified by an environment variable with the format ${ENV VAR}. These can be defined or overridden using Policy or Computer Editor → Settings → General → Environment Variable Overrides
${myDBFile}
Excludes the file myDBFile.
Comments
FILEPATH #Comment
Adds a comment to your exclusion definitions.
 C:\Documents\abc.doc #This is a comment

Syntax of file extension lists

Exclusion
Format
Description
Example
File Extension
EXT
Matches all files with a matching file extension.
doc: Matches all files with a .doc extension in all directories.
Comments
EXT #Comment
Adds a comment to your exclusion definitions.
doc #This a comment

Syntax of process image file lists

Exclusion
Format
Description
Example
File path
C:\DIR\FILE.EXT
Excludes the process image file.
  • C:\DIR\FILE.EXT
    Excludes only the file named FILE.EXT in the DIR directory.
Directories with wildcard (*)
C:\DIR*\FILE.EXT
The wildcard replaces the directory name.
  • C:\DIR*\FILE.EXT
    Matches:
    • C:\DIR\FILE.EXT
    • C:\DIR1\FILE.EXT
    • C:\DIR1\DIR2\FILE.EXT
  • C:\DIR*\*\FILE.EXT
    Matches C:\DIR1\DIR2\FILE.EXT
    Does not match:
    • C:\DIR\FILE.EXT
    • C:\DIR1\FILE.EXT
File names with wildcard (*)
C:\DIR\FILE*.EXT
C:\DIR\FILE.EXT*
C:\DIR\FILE*.EXT*
The wildcard replaces the file names.
  • C:\DIR\FILE*.EXT
    Matches:
    • C:\DIR\FILE.EXT
    • C:\DIR\FILE123.EXT
    Does not match:
    • C:\DIR\FILE.EXT123
    • C:\DIR\FILE123.EXT123
  • C:\DIR\FILE.EXT*
    Matches:
    • C:\DIR\FILE.EXT
    • C:\DIR\FILE.EXT123
    Does not match:
    • C:\DIR\FILE123.EXT
    • C:\DIR\FILE123.EXT123
  • C:\DIR\FILE*.EXT*
    Matches:
    • C:\DIR\FILE.EXT
    • C:\DIR\FILE123.EXT
    • C:\DIR\FILE.EXT123
    • C:\DIR\FILE123.EXT123
Drive name with wildcard (*)
*:\DIR\FILE.EXT
The wildcard replaces the drive name.
  • *:\DIR\FILE.EXT
    Matches C:\DIR\FILE.EXT
Special character with wildcard (*)
C:\DIR\FILE*EXT
C:\DIR\DIR2*FILE.EXT
The wildcard replaces a special character like ":", "\", and ".".
  • C:\DIR\FILE*EXT
    Matches C:\DIR\FILE.EXT
    Does not match:
    • C:\DIR\DIR2\FILE.EXT
    • C:\DIR\DIR2\DIR3\FILE.EXT
  • C:\DIR\DIR2*FILE.EXT
    Matches:
    • C:\DIR\DIR2\FILE.EXT
    • C:\DIR\DIR2\DIR3\FILE.EXT
    Does not match: C:\DIR\FILE.EXT
Comments (0)