diff --git a/Plugins/Rules/Rules_Driver_P1.json b/Plugins/Rules/Rules_Driver_P1.json index fda3157..40c14bd 100644 --- a/Plugins/Rules/Rules_Driver_P1.json +++ b/Plugins/Rules/Rules_Driver_P1.json @@ -281,6 +281,7 @@ "\\Device\\HarddiskVolume*\\Program Files (x86)\\*", "\\Device\\HarddiskVolume*\\ProgramData\\Microsoft\\Windows Defender\\*", "\\Device\\HarddiskVolume*\\ProgramData\\Microsoft\\Windows Defender Advanced Threat Protection\\*", + "\\Device\\HarddiskVolume*\\Users\\*\\AppData\\Local\\*", "*\\Huorong\\Sysdiag\\bin\\HipsDaemon.exe", "*\\360Safe.exe", "*\\PYAS.exe",