Dynamic Filters are evaluted at runtime and are not tied to the particular application being run but by other factors.
Types of Dynamic Filters include:
- Application Context Filters - These filters target particular context of applications such as Windows Service or Interactive Applications.
- Command Line Filters - A commandline filter examines the commandline (excluding the primary executable) and applies a pattern match (Exact, Partial or Regular Expression).
- Secondary File Filters - A Secondary File filter addresses the situation where the intended action is not the primary executable (such as RunDll.exe), but rather a file specified within the commandline. It examines the commandline of an application to see whether there appears to be a secondary file. If so the secondary file filter applies the specified filters to the secondary file.
- Time of Day Filter - These filters allow an application filter to be applied based on the specific time an application is launched. The time details can be set individually for each day of week, or applied to the same period on all days.
- User Context - These filters target the user that is running an application.
Drilldown to specific Dynamic Filter types
Standard Filters Available
Application Context Filters |
Description |
---|---|
Interactive Users |
You can apply policies to applications with interactive users. Select the appropriate check box and enter policy details in the fields provided. |
LocalSystem and Service applications |
You can apply policies to LocalSystem and Service applications. Select the appropriate check box and enter policy details in the fields provided. |
Service Applications |
You can apply policies to Service applications. Select the appropriate check box and enter policy details in the fields provided. |
Commandline Filters |
Description |
|
You can create application filters that are based on the commandline of the running application.
|
Secondary File |
Description |
|
You can create application filters that are based on the applications file target which is taken from the commandline.
|
Signed Applications |
Description |
Microsoft Signed Applications |
You can create a filter by associating a digital certificate.
|
Time of Day |
Description |
|
You can create a filter using certain hours.
|
User Context |
Description |
|
You can create filters based on the group membership of the user. |