Skip to main content

Update Ransomware Extension List with No Internet

Question​

How to update the ransomware extension list without internet connection in Netwrix Threat Manager?

Answer​

Netwrix Threat Manager v2.8+​

  1. Copy the raw data from the following link to a file named filters.json: CryptoBlocker − Known Extensions · GitHub.

  2. Copy the filters.json file to the following directory:

C:\Program Files\STEALTHbits\StealthDEFEND\JobService\Python\pydefend\pydefend\data
  1. Increment the version number in the filters.metadata file in pydefend\data for old files to be reprocessed.