The excludedPaths key lists the executable files of applications that are monitored by Exploit Guard that should be excluded from Exploit Guard processing. This list of monitored applications is part of the Exploit Guard global policy configured in the Agent Default Policy.
Applications that are monitored by Exploit Guard are Adobe Reader, Adobe Flash, Internet Explorer, Firefox, Google Chrome, Java, Microsoft Outlook, Microsoft Word, Microsoft Excel, and Microsoft PowerPoint
There is no default. If no executable files are listed, all monitored applications are included in Exploit Guard processing.
Important
The excludedPaths is the only value that will completely exclude a specific process.
File paths should not be included in the excludedPaths list.
The Endpoint Security (HX) server does not validate monitored application entries included in your Exploit Guard exclusion list. You must confirm your application exclusions are correct.
Executable files should be listed within quotation marks (") and separated by commas. The full list of files should be enclosed in brackets ([]). For example:
"excludedPaths": [ "chrome.exe", "iexplore.exe", "firefox.exe" ]
Change this setting using one of the following methods:
Web UI (see )
API custom configuration channels (see Using API Custom Configuration Channels).
Manually on individual endpoints using a text editor (see Modifying the Configuration File for a Single Endpoint).