File: //usr/local/edr/var/cache/policy.dat
{
"keypoint_file": [
"/etc/hosts",
"/etc/resolv.conf"
],
"keypoint_dir": [
"/boot",
"/lib/modules",
"/etc/modprobe.d/",
"/sys/fs/cgroup/systemd/system.slice",
"/sys/fs/cgroup/systemd/system",
"/sys/fs/cgroup/system/systemd.slice",
"/sys/fs/cgroup/system.slice",
"/lib/systemd/system",
"/etc/systemd/system",
"/var/lock/subsys",
"/etc/init.d",
"/usr/local/etc/rc.d",
"/etc/network/",
"/etc/sysconfig/network-scripts/"
],
"defense_white_list":[
{
"defense_type": 1,
"process_cmp_method": 1,
"process_cmp_data": [
"/usr/bin/dpkg"
],
"target_cmp_data": [
"/etc/systemd/system/edr.service.dpkg-new",
"/etc/systemd/system/edr.service.dpkg-tmp"
],
"target_cmp_method": 1
}
]
}