stanley783 0 Posted May 9, 2023 Posted May 9, 2023 Hi, i wanted to use this operation in exclusion, but it says it does not exist ('TruncateFile' - an unknown operation type). Is there any option to use FileTruncated that i am unable to write correctly? Lets say i tried this exclusion: <operations> <operation type="TruncateFile"> <operator type="OR"> <condition component="DestFileItem" property="Extension" condition="is" value="dce" /> <condition component="DestFileItem" property="Extension" condition="is" value="blabla" /> </operator> </operation> </operations> Should that be used in other operation or not allowed at all? Thanks.
ESET Staff Solution JamesR 62 Posted May 9, 2023 ESET Staff Solution Posted May 9, 2023 "TruncateFile" is an operation which falls under "WriteFile" (yes, annoying that it isn't clearly labeled as such). But you should be able to modify your exclusion as follows to allow it to work. <operations> <operation type="WriteFile"> <operator type="OR"> <condition component="DestFileItem" property="Extension" condition="is" value="dce" /> <condition component="DestFileItem" property="Extension" condition="is" value="blabla" /> </operator> </operation> </operations> stanley783 1
Recommended Posts