stanley783 0 Posted May 9, 2023 Share Posted May 9, 2023 Hi, i wanted to use this operation in exclusion, but it says it does not exist ('TruncateFile' - an unknown operation type). Is there any option to use FileTruncated that i am unable to write correctly? Lets say i tried this exclusion: <operations> <operation type="TruncateFile"> <operator type="OR"> <condition component="DestFileItem" property="Extension" condition="is" value="dce" /> <condition component="DestFileItem" property="Extension" condition="is" value="blabla" /> </operator> </operation> </operations> Should that be used in other operation or not allowed at all? Thanks. Link to comment Share on other sites More sharing options...
ESET Staff Solution JamesR 58 Posted May 9, 2023 ESET Staff Solution Share Posted May 9, 2023 "TruncateFile" is an operation which falls under "WriteFile" (yes, annoying that it isn't clearly labeled as such). But you should be able to modify your exclusion as follows to allow it to work. <operations> <operation type="WriteFile"> <operator type="OR"> <condition component="DestFileItem" property="Extension" condition="is" value="dce" /> <condition component="DestFileItem" property="Extension" condition="is" value="blabla" /> </operator> </operation> </operations> stanley783 1 Link to comment Share on other sites More sharing options...
stanley783 0 Posted June 14, 2023 Author Share Posted June 14, 2023 Thank you. Link to comment Share on other sites More sharing options...
Recommended Posts