DesertRat
November 30th, 2008, 03:15 PM
I'm not sure exactly what happens with an application that is excluded from checking in IMON, so I can't answer this question for myself.
What I'm interested in doing excluding the file creation and modification activities of a known internet application. I also know what directories will be used for these activities. So, it appears, on the surface at least, to me that I could either exclude the application from IMON or exclude the directory from AMON. or both. Also, I don't want IMON scanning data destined for this application as it arrives. HOWEVER - I do want AMON to vet the file if it opened by application other than the creating application.
Is this doable? and how?
What I'm interested in doing excluding the file creation and modification activities of a known internet application. I also know what directories will be used for these activities. So, it appears, on the surface at least, to me that I could either exclude the application from IMON or exclude the directory from AMON. or both. Also, I don't want IMON scanning data destined for this application as it arrives. HOWEVER - I do want AMON to vet the file if it opened by application other than the creating application.
Is this doable? and how?