D3FEND 技术详情

D3-EDL

D3-EDL

Executable Denylisting

定义

Blocking the execution of files on a host in accordance with defined application policy rules.

父技术
子技术
关联构件
CreateProcess
Create Process

Executes a process.

ExecutableFile
Executable File

In computing, executable code or an executable file or executable program, sometimes simply an executable, causes a computer "to perform indicated tasks according to encoded instructions," as opposed to a data file that must be parsed by a program to be meaningful. These instructions are traditionally machine code instructions for a physical CPU. However, in a more general sense, a file containing instructions (such as bytecode) for a software interpreter may also be considered executable; even a scripting language source file may therefore be considered executable in this sense. The exact interpretation depends upon the use; while the term often refers only to machine code files, in the context of protection against computer viruses all files which cause potentially hazardous instruction

语义关系
出向blocksExecutable File
出向filtersCreate Process
出向kb referenceReference - Content extractor and analysis system - Bit 9 Inc, Carbon Black Inc
出向kb referenceReference - Method and apparatus for increasing the speed at which computer viruses are detected - McAfee LLC