KAMIRAN Support 0 Posted April 11, 2017 Share Posted April 11, 2017 Hi Dears , We want to deny executing of special applications using %temp% and also for example *.exe. But it seems that it is not working in HIPS , For example we deny explorer.exe from starting new application in %temp%\*.exe , But this will not work ! Also %temp%\win32.exe will not work and it can not be deny. Why we can not use wildcards ? If we can not use wildcards and temp variables how we can block running of exe files form temp folder ? Thank you. Link to comment Share on other sites More sharing options...
Administrators Marcos 4,915 Posted April 11, 2017 Administrators Share Posted April 11, 2017 Wildcards are not currently supported. Also %temp% variable changes with every user so it won't work either. We plan to add support for wildcards in the future. Link to comment Share on other sites More sharing options...
KAMIRAN Support 0 Posted April 11, 2017 Author Share Posted April 11, 2017 4 minutes ago, Marcos said: Wildcards are not currently supported. Also %temp% variable changes with every user so it won't work either. We plan to add support for wildcards in the future. Thank you dear Marcos. We hope that we can use it ASAP. Link to comment Share on other sites More sharing options...
KAMIRAN Support 0 Posted April 11, 2017 Author Share Posted April 11, 2017 and what about %USERPROFILE% , It can not be added to HIPS rules in future ? Link to comment Share on other sites More sharing options...
Recommended Posts