Normal
You have already been told ahead of me how to create rules in hips. I will only add that instead of blocking, I expose the option to ask, this is safer, but it requires attention from the user when a request for action is received from the antivirus.
