Versions Compared

Old Version 1

changes.mady.by.user Chris Collins

Saved on

compared with

New Version Current

changes.mady.by.user Chris Collins

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Table of Contents

Applications can be

whitelisted

allow listed to stop captures from being generated

or blacklisted to create a capture when an application is opened or to stop

within the application

from being accessed entirely

.

 

info
Note

Whitelisting will not stop keyboard captures from being generated, only application captures

.It is recommended to create a separate web list for whitelisted and blacklisted applications

.

Create an Application List

Info

This step can be skipped if an application list has already been created.

Navigate to the 

Directory

Settings View and click on Applications.

Image Removed
image-20241212-163426.pngImage Added

Click Add to create a new list.

Image Removed
image-20241212-163520.pngImage Added

Give the list a name and description if necessary and click on Save to create the new list.

Add an Application to the allow list

Single click the new list to highlight it and click Settings to view the list.

Image Removed
image-20241212-163544.pngImage Added

Click on Add to add a new application entry.

Image Removed
image-20241212-163701.pngImage Added

Several options will now be available.

Image Removed
image-20241212-163729.pngImage Added

App Name

The name of the application.

App Filename

The filename of the application, i.e. CHROME.EXE

Blacklisted

Allowed

Select whether you want the application to be

blacklisted or not.

White Listed

Select whether you want the application to be whitelisted or not

allowed, stopping application captures from being generated.

Type

Allows you to categorise the application, this will show against the capture and can be searched for to group captures together.

Advanced Settings

Note

Advanced settings are not recommended for every day use.

In the Advanced section you can also find the following options:

  • App Path

    • The path to the application. Useful for wildcarding an entire folder but not necessary to fill out for each application.

Note

Unfortunately this function is not currently in use and will be reimplemented in a coming client release.

  • Confidence

    • This will modify the client’s behaviour by only allowing captures through that hit a set confidence rating. For example, setting a rating of 90 will only allow captures to be generated if the confidence score is 90+. This can help reduce false positives from certain applications. This will not work if the application has been whitelisted or blacklisted.

  • Weighting

    • Allows you to change the severity weighting for certain applications. For example, a value of -1 will reduce all severities from the website by 1. This will not work if the application has been whitelisted or blacklisted.

Newly created Application lists will be automatically assigned to the group or level they are created at.

Assign an Application List to a different group

Application lists can also be assigned to other groups after being created.

Start by clicking on the level or group you wish to assign to and click on Settings, then Monitoring.

Image Removed
image-20241212-163923.pngImage Added

Click Edit, scroll to the bottom and under App Groups, select the application list from the drop down menu.

Image Removed
image-20241212-164000.pngImage Added

Ensure App Whitelisting

or Blacklisting

is enabled and then click Save to finish.

Image Removed

image-20241212-164022.pngImage Added

Document number/reference: SEC-KB-SETUP-002

Classification Level: Public

Related Articles:

Page Tree
root@parent
spacesSSKB
startDepth1
sortnatural

Expand
titleDocument Change History
Change History