Custom Rules are Not Working With Path Environmental Variables

Products

• Carbon Black App Control

Issue/Introduction

When using an environmental variable such as %localappdata% the custom rule does not work as expected. 

Environment

• Carbon Black App Control: All Versions
• Microsoft Windows: All Supported Versions

Cause

The agent does not support environmental path variables. 

Resolution

Update the custom rule to utilize macros vs path variables. Common Path Macros

For example, instead of %localappdata% the path macro is <LocalAppData>

Additional Information

• Utilize the Guide to confirm the correct macro and if the macro is available to use per user. 
• Follow the Best Practices guide for Mastering Custom Rules.