Skip to main content

Update Ransomware Extension List with No Internet

Question​

How can you update the ransomware extension list when Netwrix Threat Manager has no internet access?

Answer​

Netwrix Threat Manager v2.8+​

  1. Copy the raw data from the following link to a file named filters.json: CryptoBlocker − Known Extensions · GitHub.

  2. Copy the filters.json file to the following directory:

C:\Program Files\STEALTHbits\StealthDEFEND\JobService\Python\pydefend\pydefend\data
  1. Increment the version number in the filters.metadata file in pydefend\data to trigger reprocessing of existing files.