EldoS | Feel safer!

Software components for data protection, secure storage and transfer

Can I use Regex in Mask?

Also by EldoS: SecureBlackbox
200+ components and classes for digital security, signing, encryption and secure networking.
#24922
Posted: 05/14/2013 02:09:32
by gwihwan Ji (Standard support level)
Joined: 08/24/2008
Posts: 36

Hi,
1. Can I use RegEx in Mask of AddPassThroughCallbackRule and other rules?
2. How to express to indicate 'folder' in Mask?
Joohyun
#24923
Posted: 05/14/2013 02:13:06
by Eugene Mayevski (EldoS Corp.)

1. Unfortunately no. Bringing regex engine to kernel mode is both complicated and not very useful. You can use regular expressions to check the name of the file for which callback has been called, though.

2. Can you please describe the task in more details? While it's not possible to denote specifically folders, for some tasks the solution can be found.


Sincerely yours
Eugene Mayevski
#24925
Posted: 05/14/2013 02:45:34
by gwihwan Ji (Standard support level)
Joined: 08/24/2008
Posts: 36

Thank you for the answer of no. 1.

At no 2,
What I expect is that I don't want to get the list of event relating to folder.
When I set a callbackfilter, Dbflt displays all events from folders and files with mask.
Because those are too many and I don't need to watch the events from folders, I'd like to get rid of event result from folder itself.

Maybe, in other words, I can say how I can distinguish events which from folder or file.

With Eng scared,
Joohyun
#24927
Posted: 05/14/2013 02:56:18
by Eugene Mayevski (EldoS Corp.)

Quote
Joohyun Kim wrote:
When I set a callbackfilter, Dbflt displays all events from folders and files with mask. Because those are too many and I don't need to watch the events from folders, I'd like to get rid of event result from folder itself.


Do you get unwanted notifications for files in that folder or for the folder itself?


Sincerely yours
Eugene Mayevski
#24929
Posted: 05/14/2013 03:03:33
by gwihwan Ji (Standard support level)
Joined: 08/24/2008
Posts: 36

The notification is not necessary to watch it especially when I mask i.e. *.exe from certain folder. All notifications from its subfolders are received.
I need only from *.exe including from subfolders.

Best regards,
Joohyun
#24930
Posted: 05/14/2013 03:21:05
by Eugene Mayevski (EldoS Corp.)

Please see this question - maybe it answers your question.


Sincerely yours
Eugene Mayevski
#25348
Posted: 06/18/2013 23:56:40
by paul tim (Basic support level)
Joined: 06/18/2013
Posts: 1

When I set a callbackfilter, Dbflt displays all events from folders and files with mask. Because those are too many and I don't need to watch the events from folders, I'd like to get rid of event result from folder itself.


Usman Malik
#25349
Posted: 06/19/2013 00:15:47
by Eugene Mayevski (EldoS Corp.)

You can exclude subfolders using AddPassthroughRule . Here's the FAQ article on this: https://www.eldos.com/cbflt/articles/7344.php


Sincerely yours
Eugene Mayevski
Also by EldoS: Callback File System
Create virtual file systems and disks, expose and manage remote data as if they were files on the local disk.

Reply

Statistics

Topic viewed 2892 times

Number of guests: 2, registered members: 0, in total hidden: 0




|

Back to top

As of July 15, 2016 EldoS Corporation will operate as a division of /n software inc. For more information, please read the announcement.

Got it!