Applies To
- Application Control Solution 6.1 SP1
Question
Is it wise to use a scan filter policy that has the following configuration?
...
Answer
The stated scan filter (assuming its used as a specification filter) would capture every file on a computer where the file header is marked as a valid executable image (COFF Header ) so long as it is not a DLL. Note that this will include driver files.
...