Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

A Secondary File filter addresses situations where the intended action is not the primary executable (such as RunDll.exe), but is rather a file specified within the command line. The filter examines the command line of an application to see whether there appears to be a secondary file. If so, then the secondary file filter applies the specified filters to the secondary file.

Secondary File Filters are complicated to set up, but well worth it, if you understand how they work. This topic will attempt to explain how they work and give you a working example of how they can be used. You can create application filters that are based on the applications file target which is taken from the command line. 

MSI File Example

If you want to elevate msi files that are in a network share you cannot use a commandline filter because the following syntax does not work:

...