Endpoint Protection

 View Only

Prevent deleting shadow copies - application control rule 

Jul 08, 2017 06:29 AM

This application control rule prevents process from using *vssadmin.exe to delete shadow copies

 

blocks vssadmin.exe with the folowing argument:

.*delete[^\]*shadows[^\]*\/all[^\]*\/quiet.*

Statistics
0 Favorited
0 Views
1 Files
0 Shares
0 Downloads
Attachment(s)
zip file
Prevent Delete Shadow Copies.zip   2 KB   1 version
Uploaded - Feb 25, 2020

Tags and Keywords

Related Entries and Links

No Related Resource entered.