how to log the apps been run which are located on non system partitions?
I just want to know if there someone run the apps that they copied to their non system partitions, such as small games.
so how to create a rule to log this event?
I have tried to set up an application control rule.
If I set the parameter with *, I can see all apps been run are logged.
If I set the parameter with "d:\*.exe", and i ran the apps in D partition, nothing was logged.
so how should i set the parameter correctly to log this kind of event?
Thanks in advance.