Skip Navigation
  1. BlackBerry Docs
  2. Cylance Endpoint Security
  3. Setup
  4. Cylance Endpoint Security Setup Guide
  5. Setting up CylancePROTECT Desktop
  6. Using device policies to manage CylancePROTECT Desktop devices
  7. Memory actions
  8. Wildcards in memory protection exclusions

Wildcards in memory protection exclusions

Memory protection exclusions can include the following special characters (all OS): ^ & ' @ { } [ ] , $ = ! - # ( ) % . + ~ _ *
On
Windows
 devices, any letter value followed by a colon (for example, C:) is also supported.
Escaping the asterisk (*) is not supported at this time. For example, you cannot use it to exclude a file that contains an asterisk in its file name.
When adding DLL exclusions, wildcards are not allowed.
Wildcard
Description
*
This matches zero or more characters, except for the platform-specific file path separators. The file path separators are '\' on
Windows
 devices, and '/' on
Linux
 and
macOS
.
**
This matches zero or more directories in an absolute path to exclude drives, directories, and child directories. For example,
C:\MyApp\''\**\''
.
Follow these rules when using the
**
 wildcard:
  • Always use
    **
     with file path separators, such as
    \**\
     or
    /**/
  • The pattern
    **\
     is valid if it is at the beginning of pattern for
    Windows
     devices only. It matches all directories inside all drives.
  • You can use 
    \**\
     or
    /**/
     multiple times in a path without limitation.
In a normal wildcard, three asterisks "***" are valid and equal a single asterisk"*". However, three asterisks are not valid for exclusions because it would hide typos. For example, in the pattern "C:\***.exe", users might have wanted to type "C:\**\*.exe" but missed one "\". If "***" were treated as a single "*" it could result in different behavior than was intended.