Critical System Protection

What is the proper use of wild cards within an IPS policy? Can I use an asterisk within a path or only at the end when specifying program/services or file lists? the help indicates use of a wild card is permitted but does not indicate how. Do the guidelines for IDS file paths (not strings) apply here?

For Example, here are some scenario's I am curious about?

"*:\program files\hello world.exe"    - For apps installed on any drive/

"c:\program files*\hello world.exe"  - for 32 and 64 bit apps installed on 64bit OS. (i.e. program files\ vs. program files (x86)\)

"d:\program directory\*\*\*"    - what are the recursion levels? Do I need the wild card for each sub directory?

"d:\program directory\hello?.exe   - is the use of a single character wild card acceptable?

I was able to determine that the use of a wild card (*) can be used anywhere with the string.   This is differant from a typical IDS policy where a file Path (FileWatch Rule) can only contain a wild card at the end of a path.