Hello,
I like your support with the exceptions in sepm 14 , for example for DLP Symantec indicate the following:
https://support.symantec.com/en_US/article.TECH220235.html
Windows
Endpoint Agent Installation Location |
C:\Program Files\Manufacturer\Endpoint Agent |
Endpoint Agent Temp Folder Location |
C:\Program Files\Manufacturer\Endpoint Agent\temp |
Processes |
edpa.exe
wdp.exe
cui.exe
kvoop.exe
brkrprcs.exe
brkrprcs64.exe
|
Drivers |
vfsmfd.sys
vrtam.sys
vnwcd.sys |
Files |
C:\Program Files\Manufacturer\Endpoint Agent\*.ead |
How is the better way to do a exception? from process and drives and if exclude all the folder instalation I need exclude one to one .exe files?
This the way how I create a Rule, is correct?