Using wildcards in rules

When using wildcards in rules, be aware that wildcards are interpreted differently in different situations in Application Control or Application Behavior Control.

Simple pattern matching (file properties rules)

? ? corresponds to one character

* corresponds to no character or multiple characters

Examples:

"abc?xyz" corresponds to "abc1xyz" but not "abcxyz" or "abc123xyz"

"abc*xyz" corresponds to "abc1xyz" or "abcxyz" or "abc123xyz".

C:\Pro*\test.exe corresponds to C:\ProgramFiles\test.exe or C:\ProgramFiles\tools\test.exe

Pattern matching for paths (application behavior rules and application collections)

? ? corresponds to one character

* corresponds to no character or several characters but no path separators (\)

\**\ corresponds to no or multiple 'directories' in a path

Examples:

C:\*\temp corresponds to C:\Windows\temp but not C:\temp or C:\Windows\System32\temp

C:\**\temp corresponds to C:\Windows\temp or C:\temp or C:\Windows\System32\temp

C:\Pro*\test.exe is equivalent to C:\ProgramFiles\test.exe but not C:\ProgramFiles\tools\test.exe

C:\Pro*\**\test.exe corresponds to C:\ProgramFiles\test.exe or C:\ProgramFiles\tools\test.exe