The following table lists the parameters to configure StellarProtect
(Legacy Mode)
Application Lockdown exclusions.
StellarProtect (Legacy Mode) Application Lockdown Section Parameters
Parameter
|
Settings
|
Value
|
Description
|
ExceptionPathList : Container for the exceptions
list |
|||
ExceptionPath |
Type |
regexp |
Use the regular expression to specify the file that will be excluded
from Application Lockdown monitoring
|
file |
Use the file path to specify the file that will be excluded from
Application Lockdown monitoring
|
||
folder |
Use the folder path to specify the files within the folder that will
be excluded from Application Lockdown monitoring
|
||
folderandsub |
Use the folder path to specify the files within the folder and its
subfolders that will be excluded from Application Lockdown
monitoring
|
||
Path |
<exception_path> |
Files specified by using regular expressions or file/folder paths are
treated as lockdown exclusions
|
|
TrustedHash : Container for the trusted hash list |
|||
PredefinedTrustedHash |
Type |
updater |
File matched by this hash value (SHA-1) is treated as a Trusted
Update
|
lockdown |
File matched by this hash value (SHA-1) is not treated as a Trusted
Update
|
||
Hash |
<SHA-1_hash_value> |
SHA-1 hash value of this file
|
|
Note |
<note> |
Add a note for the file matched by this hash value
|
|
WriteProtection : Container for the Write Protection
section |
|||
ExceptionList : Container for the Write Protection
exceptions list |
|||
Exceptionlist |
Type |
TYPE_FILE |
Use the file path to specify the file that can be written
by
all processes or specific process
|
TYPE_FOLDER |
Use the folder path to specify the files within the folder that can
be written by all processes or specific process
|
||
TYPE_FOLDER_AND_SUBFOLDER |
Use the folder path to specify the files within the folder and its
subfolders that can be written by all processes or specific
process
|
||
TYPE_REGKEY |
Use the registry key to specify the files within the folder that can
be written by all processes or specific process
The registry key can be abbreviated or expanded as shown below:
|
||
TYPE_REGKET_AND_SUBKEY |
Use the registry key and its subkeys to specify the files within the
folder and its subfolders that can be written by all processes or
specific process
|
||
TYPE_REGVALUE |
Use the registry value to specify the files that can be written by
all processes or specific process
|
||
Path |
<exception_path> |
Use the corresponding path type to specify Write Protection
exclusions
|
|
Process |
<process_path> |
Use the process path to specify specific process that can write the
specified file
|
|
List : Container for the Write Protection List |
|||
List |
Type |
TYPE_FILE |
Use the file path to specify the file
|
TYPE_FOLDER |
Use the folder path to specify the file
|
||
TYPE_FOLDER_AND_SUBFOLDER |
Use the folder path to specify the files within the folder and its
subfolders
|
||
TYPE_REGKEY |
Use the registry key to specify the files within the
folder
|
||
TYPE_REGKET_AND_SUBKEY |
Use the registry key and its subkeys to specify the files within the
folder and its subfolders
|
||
TYPE_REGVALUE |
Use the registry value to specify the file
|
||
Path |
<path> |
Use the corresponding path type to specify Write Protection list
|