nexxai / CryptoBlocker

A script to deploy File Server Resource Manager and associated scripts to block infected users
GNU General Public License v2.0
200 stars 73 forks source link

Scheduled Task would blank out FileGroups in the Exceptions list #70

Open xicanoink opened 5 years ago

xicanoink commented 5 years ago

So, using the latest version of the script, we are using the ExcludePaths.txt to compile all our known exceptions. We did a scheduled task to run the script nightly to be up to date.
On fresh install, filescreen exceptions are built and all the filegroups are filled in. Once the scheduled task runs, the exception path is there, but the filegroups are empty. We added a line to delete all the exceptions before it does the building and that seems to have fixed it for us.

&filescrn.exe Exception delete "/Path:$_" /Quiet

right before the original scripts:

&filescrn.exe $ExclusionArgs

Don't know if anybody else is seeing this.

scholtefrl commented 5 years ago

We modified our script, every time the script runs we read the conent listed in the ExcludePaths.txt. We also pair an special filegroup tot these paths listed in de Excludepaths.txt. Otherwise you would whitlist all extensions in these directory's. Lookup my modified version of the script in my Github profile. https://github.com/scholtefrl/CryptoBlocker