Other Access Protection commands

--getallaprules

Prints all the Access Protection rules (irrespective of whether the rules are enabled or disabled). Information displayed includes rule index, rule name, actions, and origin (Trellix-defined or User-defined).

To view all Access protection rules, run:./mfetpcli --getallaprules

--getapruleconfig [ruleindex]

Prints the details of the Access Protection rule identified by ruleindex. Information displayed includes actions, processes/users to which the rule applies, subrule and their associated targets.

To print the Access Protection rules, run:

./mfetpcli --getapruleconfig [ruleindex]

--deleteaprule [ruleindex]

To delete the Access Protection rule identified by ruleindex.

Rule name cannot be used when deleting rules.

Note

Trellix-defined rules cannot be deleted.

To delete an Access Protection rule, run: ./mfetpcli --deleteaprule [ruleindex]