Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

File

...

filters target the actual executable that is being run, with numerous sub-types targeting different aspects of executables.

Types of File Filters

...

Child pages (Children Display)
alltrue
depth1
sorttitle

Standard File Filters Available

Executable Filters

Description

Instant Messaging Applications -

  • AOL Instant Messenger
  • Google Talk
  • MSN Messenger
  • Skype
  • Trillian
  • Windows Messenger
  • Yahoo! Messenger

You can apply security policies to any of the listed Instant Messaging applications. If any of these applications are installed in the future, you can automatically add them to a policy. You can:

  • Enter a filter name and description.
  • Enter a File name and File path in the fields provided.
  • (Optional) Click Include subdirectories to filter them also.
  • Enter Win32 Executable File Information:
    • Internal Name
    • Original file name
    • File version
    • Product name
    • Product version
    • Company name

Internet Browsers -

  • Firefox
  • Internet Explorer

You can apply a security policy to the listed Internet applications. You can configure it the same as Instant Messaging Applications, above.

Mail Clients -

  • Eudora
  • Outlook Express

You can apply a security policy to the listed mail applications. You can configure it the same as Instant Messaging Applications, above.

Media Players -

  • iTunes
  • Microsoft Windows Media Player
  • QuickTime
  • RealPlayer
  • Winamp

You can apply security policies to the listed Media Player applications. If any of these applications are installed in the future, you can automatically add them to a policy. You can configure them the same as Instant Messaging Applications, above.

MS Office Suite -

  • MS Access
  • MS Excel
  • MS FrontPage
  • MS Outlook
  • MS Word
  • Microsoft Installer Filer Filter
  • Win32 Executables Discovered in the Last Week

You can apply security policies to the listed Microsoft Office Suite applications. If any of these applications are installed in the future, you can automatically add them to a policy. You can configure them the same as Instant Messaging Applications, above.

...

Signed Applications

...

Description

...

Microsoft Signed Applications

You can create a filter by associating a digital certificate.

...

Application Compatibility Filters - These filters are used to detect administrative privileges that may be required.

Drive Type Filters - These are filters that are used to specify a drive type.

Executable Filters - These filters specify executables that are commonly used, such as - Instant Messaging applications, web browsers, mail clients, etc.

Executable Headers Filters - Filter based on an executable header attributes.

File Owner Filters - Filter based on the owner of the file.

File Specification Filters - These filters use the location of the executable for filtering.

File Type Filters - These filters use the extension or MIME type to filter.

Manifest Present Filter - These filters test whether an executable has a security manifest.

Security Catalogs Filter - These filters use the security catalogs to filter.