监测进程访问浏览器历史记录

需要配合使用火绒的自定义防护功能

• 将以下代码复制到记事本，保存为 监测历史.json

{
    "ver":"5.0",
    "tag":"hipsuser",
    "data":[
        {
            "id":1,
            "power":1,
            "name":"Chromium-Based Protection",
            "procname":"*",
            "treatment":1,
            "policies":[
                {
                    "montype":1,
                    "action_type":6,
                    "res_path":"?:\\Users\\*\\AppData\\Local\\*\\User Data\\Default\\*"
                }
            ]
        },
        {
            "id":2,
            "power":1,
            "name":"Firefox Protection",
            "procname":"*",
            "treatment":1,
            "policies":[
                {
                    "montype":1,
                    "action_type":6,
                    "res_path":"?:\\Users\\*\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*"
                }
            ]
        },
        {
            "id":3,
            "power":1,
            "name":"IE Protection",
            "procname":"*",
            "treatment":1,
            "policies":[
                {
                    "montype":1,
                    "action_type":6,
                    "res_path":"?:\\Users\\*\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_*\\AC\\MicrosoftEdge\\User\\Default\\*"
                },
                {
                    "montype":1,
                    "action_type":6,
                    "res_path":"?:\\Users\\*\\AppData\\Local\\Microsoft\\Windows\\WebCache\\*"
                },
                {
                    "montype":1,
                    "action_type":6,
                    "res_path":"?:\\Users\\*\\AppData\\Local\\Microsoft\\Windows\\History\\*"
                },
                {
                    "montype":1,
                    "action_type":6,
                    "res_path":"?:\\Users\\*\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\*"
                }
            ]
        }
    ]
}

• 导入进火绒自定义规则
• 如果看到是浏览器自身访问历史记录请点击允许自动处理

原文：https://www.cnblogs.com/Gala-Thought/p/14736789.html