Application modification detection

Displays notifications if modified applications, for which a firewall rule exists, attempt to establish connections. Application modification is temporarily or permanently replacing an original application with another application with a different executable (protects against abusing firewall rules).

This feature is not meant to detect modifications to any application in general. The goal is to avoid abusing existing firewall rules, and only applications for which specific firewall rules exist are monitored.

Enable detection of application modifications—The program will monitor applications for changes (updates, infections, other modifications) if selected. When a modified application attempts to establish a connection, you will be notified by the Firewall.

Allow modification of signed (trusted) applications—Do not notify if the application has the same valid digital signature before and after the modification.

List of applications excluded from detection—Click Edit and Add or modify individual applications for which modifications are allowed without notification.