Add Executable or Edit Executable

Add or edit an executable associated with a rule or group.

Options
Option Definition
Name Specifies the name that you call the executable.

This field is required with at least one other field: File name or path, File description, MD5 hash, or signer.

File name or path Specifies the file name or path of the executable to add or edit.

Click Browse to select the executable.

The file path can include wildcards.

File description Indicates the description of the file.
MD5 hash Indicates the (32-digit hexadecimal number) MD5 hash of the process.
Signer Enable digital signature checkGuarantees that code hasn't been changed or corrupted since it was signed with cryptographic hash.

If enabled, specify:

  • Allow any signature — Allows files signed by any process signer.
  • Signed by — Allows only files signed by the specified process signer.

    A signer distinguished name (SDN) for the executable is required and it must match exactly the entries in the accompanying field, including commas and spaces.

    The process signer appears in the correct format in the events in the log files. For example:

    C=US, S=WASHINGTON, L=REDMOND, O=MICROSOFT CORPORATION, OU=MOPR, CN=MICROSOFT WINDOWS

Notes Provides more information about the item.