Exclusions and Inspection Settings

The default behavior is Inspect all domains and files. All files in the file system are inspected and sent for emulation when applicable. You can configure exclusions that are not inspected.

Click Add exclusion to exclude a file or process from inspection. You can define an exclusion by many different criteria. Criteria include: Domain, folder, and SHA1 hash. Add more information to make the exclusion very specific and less information to make it broad.

Notes on exclusions:

• Domain exclusions are not supported by file system emulation.
• SHA1 exclusions are not supported by the SandBlast Agent Browser Extension.
• When you exclude a folder, enter the folder as a Windows path, for example: C:\Windows\System32\user\.
• Folder exclusions support wildcards. These wildcards are supported:
  • ? -- Each question mark masks one character
  • * -- Each star masks zero or more characters