Block Execution of Specific Applications Regard of version

[DanielBr]

Hi,

We want to enforce the use of only the approved version of AnyDesk (9.6.5.0 and above) on all Windows endpoints and completely prevent execution of any older versions of anydesk.exe.

Is there a clean and maintainable way to achieve this using Cortex XDR Prevention/Restriction Profiles?

From what I’ve seen, the straightforward way is:
- Block anydesk.exe by path/name
- Create hash-based exceptions only for the approved version(s)

every old version has a different hash, so we would need to collect and maintain a long block-list of hashes for all previous versions (which is not practical).

1. Can we restrict execution based on the software version instead of the hash?
2. Is there a way to “allow only versions ≥ 9.6.5.0” or “allow only this specific version” without blocking every single old hash manually?

Thanks