Hi @Landon Tran Thanks for posting in our Q&A.
For our problem, as far as I know that the Detect rules file option does not support the use of wildcards.
Thus, you need to use other way around this, like finding other changes on registry, use detection script etc. Complex detection methods often require writing a script. Such as
If (Get-ChildItem C:\ProgramData\ -Recurse -Force -Include "Bom")
{
Write-Host "File detected"
}
More details please refer to : https://learn.microsoft.com/en-us/mem/intune/apps/apps-win32-add#step-4-detection-rules
If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.