config.xml
<?xml version="1.0" encoding="utf-8" ?>
<Configuration> <Rules> <Rule> <Name>Web Request</Name> <Conditions> <Condition> <Property>command</Property> <Operator>contains</Operator> <Value>webrequest</Value> </Condition> <Condition> <Property>command</Property> <Operator>contains</Operator> <Value>invoke</Value> </Condition> </Conditions> <Actions> <ActionRef> <Name>File</Name> </ActionRef> </Actions> </Rule> </Rules> <Actions> <Action> <Name>File</Name> <Type>File</Type> <Settings> <Setting> <Name>Path</Name> <Value>%temp%\test.txt</Value> </Setting> <Setting> <Name>Format</Name> <Value>{appname},{rule}</Value> </Setting> </Settings> </Action> <Action> <Name>Block</Name> <Type>Block</Type> </Action> </Actions> <License> <Terms>PD94bWwgdmVyc2lvbj0iMS4wIj8+DQo8TGljZW5zZVRlcm1zIHhtbG5zOnhzaT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS9YTUxTY2hlbWEtaW5zdGFuY2UiIHhtbG5zOnhzZD0iaHR0cDovL3d3dy53My5vcmcvMjAwMS9YTUxTY2hlbWEiPg0KICA8U3RhcnREYXRlPjIwMjAtMDgtMTRUMjI6NDY6NTMuOTI2MTk5M1o8L1N0YXJ0RGF0ZT4NCiAgPFVzZXJOYW1lPmFkYW08L1VzZXJOYW1lPg0KICA8UHJvZHVjdE5hbWU+UG93ZXJTaGVsbFByb3RlY3Q8L1Byb2R1Y3ROYW1lPg0KICA8RW5kRGF0ZT4yMDIxLTA4LTE0VDIyOjQ2OjUzLjkyNjE5OTNaPC9FbmREYXRlPg0KICA8U2VhdE51bWJlcj4xPC9TZWF0TnVtYmVyPg0KICA8SXNUcmlhbD5mYWxzZTwvSXNUcmlhbD4NCjwvTGljZW5zZVRlcm1zPg==</Terms> <Signature>5uOJQ5lj1PXWpMlGIVv3IryDsfZxizTVVOzRe1leQd2zYiodK+sH2Q==</Signature> </License> </Configuration> |