This article demonstrates how to verify if the Behavior Monitoring lists (approved and/or blocked) are followed by the OSCE agent.
The OSCE Behavior Monitor approved (or blocked)program list can be configured from the web console of both the server side and the client side:
- The configuration of the server side is saved as a OSCE-User(user).cfg file in the ...\Trend Micro\BM\Profiles folder.
- The configuration of the client side is saved as a OSCE-Global(user).cfg file in the ...\Trend Micro\BM\Profiles folder.
Both files are encrypted, so they cannot be opened, nor can you confirm the file you just added. However, the timestamp of that file should change to the current time if it was successfully changed/modified.