Need help to allow a Process Assignment Event

[Sankarasubramanian Hariharaputhiran]

Hello Team,

I am trying to allow the below process assignment event in DCS prevention policy

Process: C:\Windows\System32\cmd.exe 
Argument: cmd.exe /C ""C:\PROGRA~1\BMCSOF~1\Patrol3\bin\NAWK.exe" -f "C:\Windows\TEMP\Patrol4832" "C:\Windows\TEMP\Patrol4831""

DCS policy utility tool suggest the below but test pattern says mismatch
cmd.exe //C ""C:/\PROGRA~1/\BMCSOF~1/\Patrol3/\bin/\NAWK.exe"?-f?"C:/\Windows/\TEMP/\Patrol4832"?"C:/\Windows/\TEMP/\Patrol4831""


Many thanks

[Robocop]

try the following

&ci; cmd.exe //C ""C:/\PROGRA~1/\BMCSOF~1/\Patrol3/\bin/\NAWK.exe"?-f?"C:/\Windows/\TEMP/\Patrol4832"?"C:/\Windows/\TEMP/\Patrol4831""

[Sankarasubramanian Hariharaputhiran]

Hi Rob,

I tried the one that you suggested, still it shows pattern mismatch