How to generate application blocking rules based on SHA256 file without source file [Kaspersky Security for Windows Server]

[Antipova Anna]

Advice and Solutions (Forum Knowledgebase) Disclaimer. Read before using materials.

Description

As part of proactive security, you may wish to add sha256 to block the execution of application or malicious applications without having the original source files.

This article explains how to perform this action.

How To

1. Create a text file containing the sha256 you want to block.

2. Use the AppRulesGenerator.exe app to generate an xml file:

   

3. Import the generated .xml file into the KSWS policy:

   

AppRulesGenerator.exe can be downloaded here.