topic Question about folder exclusion in Cortex XDR Discussions

Question about folder exclusion

R.Tuyub — Tue, 18 Mar 2025 23:29:00 GMT

Hello Palo Live Community.

I need to exclude a folder along with all its subfolders and files of any type. To do this, I set up a rule similar to the following:
C:\Program Files (x86)\folder\*
However, I keep getting alerts about suspicious files inside this folder.
Does anyone know why this is happening, could the rule be structured incorrectly? From my understanding, it should work correctly.

Re: Question about folder exclusion

aspatil — Wed, 19 Mar 2025 06:10:08 GMT

Hello @R.Tuyub ,

Can you confirm what kind of exclusion have you provided?

Re: Question about folder exclusion

R.Tuyub — Thu, 20 Mar 2025 15:39:21 GMT

Helle @aspatil

This is an exception I created from Disable Prevention Rules