nexxai / CryptoBlocker

A script to deploy File Server Resource Manager and associated scripts to block infected users
GNU General Public License v2.0
200 stars 73 forks source link

Filename exclusion #61

Open LucM44 opened 5 years ago

LucM44 commented 5 years ago

I use the SkipList to exclude some files extension (.enc), and IncludeList to add other file extension (.pst, .exe). Now I want to add a Filename in SkipList *(TeamViewerQS.exe).** But it doesn't work. 2 possible explanations: either Filename exclusion doesn't work (only file extension work) or as *.exe is in IncludeList, it doesn't read the Filename with an exe in SkipList.

How can I Skip a Filename instead of an file extension?

Thanks

nexxai commented 5 years ago

The IncludeList and SkipList are different types of lists:

While FSRM gives us the ability to whitelist other patterns, we are not using that feature. For your specific use-case, you'll likely need to fork our script and add a function that adds your entry to the "Files to exclude:" section of the File Group.

If you'd like to submit a Pull Request with that feature, I'd be happy to include it.

LucM44 commented 5 years ago

Thanks for your answer. If it is possible, yes I'd like to submit this. While waiting a solution, I add a new exclusion rule in FSRM with the filename. But I have to recreate it each time script is running