Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

how to log the apps been run which are located on non system partitions?

Created: 24 Mar 2013 | 2 comments

I just want to know if there someone run the apps that they copied to their non system partitions, such as small games.

so how to create a rule to log this event?

I have tried to set up an  application control rule.

If I set the parameter with *, I can see all apps been run are logged.

If I set the parameter with "d:\*.exe", and i ran the apps in D partition, nothing was logged.

so how should i set the parameter correctly to log this kind of event?

Thanks in advance.

 

 

Operating Systems:

Comments 2 CommentsJump to latest comment

.Brian's picture

Did you try setting just as "D:"

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.