excludedProcesses Key

The excludedProcesses key lists the processes that should be excluded from Malware Protection processing. This list of monitored applications is part of the malware protection global policy.

There is no default. If no processes are listed, all processes are included in Malware Protection processing.

Specify the fully qualified name of a process you want to exclude from Malware Protection processing within quotation marks ("), and separated by commas. For example:

"excludedProcesses": [
    "c:\\windows\\winhlp32.exe",
    "c:\Program Files (x86)\Redline\Redline.exe"
]

Exclusion Guidelines

Follow these guidelines when adding files and folders, processes, and MD5 hashes to the Malware Protection exclusion list:

There are three possible values that you can exclude from Malware Protection processing: excludedProcesses, excludedFiles, and excludedMD5s.

Exclusion Value	Description
excludedProcesses	This value completely excludes the full path to the binary executable file (.exe) from Malware Protection scanning.
excludedFile	This value excludes specific files or folders from Malware Protection scanning. Important Excluded paths that end with a separator--(\) in Windows devices and (/) in macOS--devices are treated as a folder and all files and subdirectories are excluded. For more information on how to format these exclusions see the community article on this topic.
excludedMD5	This value excludes MD5 hashes from Malware Protection scanning. MD5 hashes should be listed as a sequence of 32 hexadecimal digits. Important The Endpoint Security (HX) server does not validate the MD5 hash entries included in your Malware Protection exclusion list. You must confirm your MD5 hash exclusions are represented by 32 hexadecimal digits.

The following table lists examples for excluding files and folders from Malware Protection processing. Reference these examples when adding file and folder excludedFile paths to your Malware Protection exclusion list.

Exclusion Method	Exclusion Example
Exclude a specific file name.	`myfile`
Exclude a specific file name located in a specific directory.	`C:\Users\Admin\Documents\myfile.txt`
Exclude all files with a specific extension in all directories.	`*.TXT`
Exclude all files and sub directories in a specific directory.	`C:\Users\Admin\Documents\` or `C:\Users\Admin\Documents\*` Both paths are equivalent.
Exclude all files and sub-directories in a specific directory for all users directories.	`C:\Users\\Documents\`
Exclude all files with a specific extension located in a specific directory for all users directories.	`C:\Users\\Documents\.doc`
Exclude all files in a specific directory for all users directories.	`C:\Users\\Documents\.*`
Exclude a specific file in all users directories that start with a name.	`C:\Users\Name*\Documents\file.txt`
Exclude a specific file in all users directories that start with a name followed by a single character.	`C:\Users\Name?\Documents\file.txt`

Change this setting using one of the following methods:

Web UI (see ).
API custom configuration channels (see Using API Custom Configuration Channels.
Manually on individual endpoints using a text editor (see Modifying the Configuration File for a Single Endpoint).

excludedProcesses Key

Exclusion Guidelines

Important

Important