The Next_Process_Behavior command defines a new chained link in the AAC target. You can use this command to create behavioral rules to block a specific sequence of actions.
Note
Exploit Prevention is not supported in the ARM architecture.
Description
This command takes no arguments and can contain only Target commands.
A Rule command can contain multiple chained links definitions. Each Next_Process_Behavior command must be defined together with a Match command with the PROCESS object_type_value within a Target command.
Syntax
Rule { ...
Target {
Match PROCESS {
...
}
Next_Process_Behavior {
Target {
...
}
}
...
}
}