The Process command provides a shortcut method for defining Initiator Match sections.
Note
Exploit Prevention is not supported in the ARM architecture.
Description
This command takes no arguments and can contain multiple Include and Exclude commands.
A Rule command can contain multiple Process commands. The Process command is optional. If not specified, the rule uses the value ** to indicate all processes.
Syntax
Rule { ...
Process {
}
...
}This syntax is a shortcut for:
Rule { ...
Initiator {
Match PROCESS {
}
}
...
}