The Source Process Menu

The Source Process field in a memory rule specifies the process that is requesting access to the Target Process.

The Source Process menu includes options that are completely defined by your menu choice, such as Any Process, and options that require entry of a path to the process(es):

Table 1. Source Process Menu Options

Field	Description
Any Process	Applies the rule to any process that attempts to access the target process.
Any Promoted Process	Applies the rule to any source process that is promoted at the time the rule is evaluated. A promoted process is any approved process that is marked as an installer, or has been promoted as a consequence of a custom rule, or is an approved process launched by a promoted process.
Any System Process	Applies the rule to every source process that is running under the security context of the Local System user. This has the same effect as choosing Local System in the User or Group menu.
Specific Process...	Opens a text box below the menu, into which you can enter source processes you want controlled by this rule.
Any Process Except...	Opens a text box below the menu, into which you can enter the source processes you do not want controlled by this rule. Note: If you specify a User or Group and also choose Any Process Except from the process menu, the rule is enforced unless the exception process is being executed by the user or group.