Endpoint target scan filters are not working

book

Article ID: 160461

calendar_today

Updated On:

Products

Data Loss Prevention Endpoint Discover

Issue/Introduction

When trying to use Filters for a Endpoint Target scan it seems the filters are not working.

 

 

*\Prefetch\*

*\SoftwareDistribution\*

*\Local Settings\Temporary Internet Files\*

*\Local Settings\Temp\*

*\Local Settings\Application Data\*

*\Local Settings\RECYCLER\*

*\Cookies\*

*\System Volume Information\*

Resolution

The current filter mechanism for DAR requires filters to be specified in a comma separated list.

*\Prefetch\*,*\SoftwareDistribution\*,*\Local Settings\Temporary Internet Files\*

Also, EDAR filters currently* do not understand environment variables like %USERPROFILE% etc...

 

*Support for environment variables in EDAR scanning was added in DLP 12.5