I have a set of programs I'd like to prevent from accessing the network. These all sit under a common parent directory. I'd like to be able to say, essentially, "apply this rule to any application coming from this path (or any of its subdirectories)".
For example, setting "C:\MyUntrustedApps\" would affect the behavior of, say, "C:\MyUntrustedApps\application1.exe" as well as "C:\MyUntrustedApps\app2\otherapp.exe".