Advertisements

More #Whitelisting fun

So one would think that you can just use

%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir%

And you would be good…. well not really, you also want

C:\Program Files

Do the same for the x86 Directory….

Also, it doesn’t seem to like to use network drives in the whitelist, instead use the UNC path….

I don’t know how it plays with DFS

Advertisements