Artifact Classification

This page displays the classification rules that the portal is using for the classification of the artifacts. The users can create/edit/clone and edit/delete the rules, based on their requirements. The "priority" column means which rule will be executed last and which one is more important.

• Query Based Classification: This section displays query-based classification rules. The users can create/edit/clone and edit/delete the rules, based on their requirements.

• List Based Classification: This section displays list-based classifications. The users can create/edit/clone and edit/delete the lists, based on their requirements.

• List Types Management: This section displays list types. The users can create a new list type or edit an existing one. For default, a global white list is enabled and it can exclude entries from the sysmon collection.

• Tags Management: This section displays tags. The users can create a new tags or edit an existing one.

• Maturity Assesment Categories: This section allow users to create or edit the maturity assesment categories.

• Maturity Assesment Information Sources: This section allow users to review their current state on maturity scoring. The users can analyse and take action after reviewing the information sources.

• Host-Group Based Permission List: This section allow users to create a list for application management. The list elements won't blocked by the CyberCyte Agent, except the other processes runs on the device.