Follow these guidelines when adding files and folders, processes, and MD5 hashes to the Deny List exclusion list:
There are three possible values that you can exclude from Deny List processing: excludedProcesses, excludedFiles, and excludedMD5s.
Exclusion Value
Description
excludedProcesses
This value completely excludes the full path to the binary executable file (.exe) from Deny List scanning.
excludedFile
This value excludes specific files or folders from Deny List scanning.
Important
Excluded paths that end with a separator--(\) in Windows devices is created as a folder and all files and subdirectories are excluded. For more information on how to format these exclusions see the community article on this topic.
excludedMD5
This value excludes MD5 hashes from Deny List scanning. MD5 hashes should be listed as a sequence of 32 hexadecimal digits.
Important
The Endpoint Security server does not validate the MD5 hash entries included in your Deny List exclusion list. You must confirm your MD5 hash exclusions are represented by 32 hexadecimal digits.
l Wildcard characters (*) and (?) are supported in file and folder paths excludedFile only. only:
Asterisk (*)—An asterisk will match one or more characters. If the asterisk is at the end of a path, the excluded path will include all sub-directories.
Question mark (?)—A question mark will match a single character.
User-specific environment variables are not supported.
The following table lists examples for excluding files and folders from Deny List processing. Reference these examples when adding file and folder excludedFile paths to your Deny List exclusion list.
Exclusion Method | Exclusion Example |
|---|---|
Exclude a specific file name. | myfile |
Exclude a specific file name located in a specific directory. | C:\Users\Admin\Documents\myfile.txt |
Exclude all files with a specific extension in all directories. | *.TXT |
Exclude all files and sub directories in a specific directory. | C:\Users\Admin\Documents\ or C:\Users\Admin\Documents\* Both paths are equivalent. |
Exclude all files and sub-directories in a specific directory for all users directories. | C:\Users\*\Documents\* |
Exclude all files with a specific extension located in a specific directory for all users directories. | C:\Users\*\Documents\*.doc |
Exclude all files in a specific directory for all users directories. | C:\Users\*\Documents\*.* |
Exclude a specific file in all users directories that start with a name. | C:\Users\Name*\Documents\file.txt |
Exclude a specific file in all users directories that start with a name followed by a single character. | C:\Users\Name?\Documents\file.txt |