How to add Safer path filter in process monitor

Question

One of the experiments in Windows Internals requires that I add a a path filter for Safer in process monitor. I tried this but no events are displayed. How does one add a path filter for "Safer" ?

Answer 1

Have a look at this:
https://learn.microsoft.com/it-it/windows-server/identity/software-restriction-policies/determine-allow-deny-list-and-application-inventory-for-software-restriction-policies

Once you know where to look at its just a matter to add the right filter in the Procmon interface.

HTH
-mario