I've wanted a replacement for CoreForce for quite some time: http://corelabs.coresecurity.com/index.php?module=Wiki&action=view&type=project&name=Core_Force ht

I've wanted a replacement for CoreForce for quite some time: http://corelabs.coresecurity.com/index.php?module=Wiki&action=view&type=project&name=Core_Force http://corelabs.coresecurity.com/index.php?module=Wiki&actio... It was a piece of security software modeled after OpenBSD's pf firewall which let you define policies around network, file, and registry access for applications. You were able to setup really fine-grained policies as well, for example to only allow access to the C:\temp directory for list and read access, but to deny delete access, and to ask the user to accept/reject if it tries to open a file for writing. So instead of monitoring access after the fact, CoreForce let you actively grant permissions and would either silently deny or interactively prompt you when an application went outside the resources you granted.