65 lines
1.6 KiB
JSON
65 lines
1.6 KiB
JSON
{
|
|
"dataFlowSeq": 1,
|
|
"dataFlow": {
|
|
"_comments": "type(common, removalbe, externalhdd, networkdriveout, cdrom, mtp, bluetooth), policy(0:none,1:allow,2:block)",
|
|
"1": {
|
|
"exceptionPath": [
|
|
"\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles",
|
|
"\\AppData\\Local\\Microsoft\\Windows\\Explorer\\",
|
|
"\\AppData\\Roaming\\Microsoft\\Windows\\Recent",
|
|
"\\desktop.ini",
|
|
"\\ProgramData\\Microsoft\\Windows\\AppRepository\\Packages",
|
|
"\\AppData\\Local\\Microsoft\\Windows\\",
|
|
"\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch",
|
|
"\\AppData\\Roaming\\Microsoft\\Windows\\SendTo",
|
|
"\\AppData\\Local\\Microsoft\\Windows\\INetCache",
|
|
"\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\",
|
|
"\\AppData\\Local\\",
|
|
"\\program files\\windowsapps\\microsoft",
|
|
"wpd_data_"
|
|
],
|
|
"deviceControl": {
|
|
"mtp": {
|
|
"policy": 1,
|
|
"fileSize": 20
|
|
},
|
|
"bluetooth": {
|
|
"policy": 0,
|
|
"fileSize": 20
|
|
}
|
|
},
|
|
"hookProcess": {
|
|
"FSQUIRT": {
|
|
"deviceType": "bluetooth",
|
|
"exceptionPath": [],
|
|
"extension": [],
|
|
"exceptionExtenstion": ["exe", "dll", "ico", "dat", "lang"],
|
|
"mode": 0
|
|
},
|
|
"LINKENGKM": {
|
|
"deviceType": "usbTousb",
|
|
"exceptionPath": [],
|
|
"extension": [],
|
|
"exceptionExtenstion": ["exe", "dll", "ico", "dat", "lang"],
|
|
"mode": 0
|
|
},
|
|
"EXPLORER": {
|
|
"deviceType": "mtp",
|
|
"exceptionPath": [],
|
|
"extension": [
|
|
"txt",
|
|
"docx",
|
|
"hwp",
|
|
"xlsx",
|
|
"xls",
|
|
"ppt",
|
|
"pptx",
|
|
"docx"
|
|
],
|
|
"exceptionExtenstion": ["exe", "dll", "ico", "dat", "lang"],
|
|
"mode": 0
|
|
}
|
|
}
|
|
}
|
|
}
|
|
} |