Creating a Custom Script Rule

The procedure below describes how to create a custom script rule. The rule parameters are shown in Table: Script Rule Parameters .

To add (create) a custom script rule:

1. In the console menu, choose Rules > Software Rules, and on the Software Rules page, click the Scripts tab. The Custom Script Rules table appears:

   

2. Click the Add Script Rule button. The Add Script Rule page appears.

   

3. In the Rule Name field, enter the name you want to appear on the list of rules. You may also provide a longer, optional Description below the name field.
4. By default, a new script rule is Enabled when you configure it and click Save. If you want to enable the rule later, click Disabled in the Status field.
5. Choose a Platform: Windows, Mac or L inux. All script rules are platform-specific.

6. Choose a Script Definition, which determines how the script processor will be identified. See Table: Script Rule Parameters for the choices.

   Note: PLATFORM NOTE: For Mac or Linux scripts, only Script Type and Process is allowed in this field.
7. For all Script Rules, enter one or more Script Types. A Script Type is the file name definition for this script type, usually the asterisk followed by a dot and the file extension. To add more script types, after entering the first pattern in the Script Type field, clicking the down arrow to the right of the field. This displays the Add and Remove buttons, which allow you to add to (or remove from) the list of patterns shown.
8. For Script Type and Process rules (Windows only), you must also add one or more Script Processes. To enter more than one process, use the Add button to the right of the field as described in the previous step.
9. If you want to make sure all existing scripts matching this definition are added to the list of files tracked and controlled by App Control, check Rescan Computers box.
10. Click the Save button to save the rule. The rule now appears on the Script Rules page.

Create a Custom Script Rule

The procedure below describes how to create a custom script rule.

Prerequisites

For description of the Script rule parameters, see Script Rule Parameters.

Procedure

1. On the console menu, navigate to the Rules > Software Rules page.
2. Click the Scripts tab and select the Add Script Rule button.
   The Add Script Rule page appears.
3. In the Rule Name field, enter the name you want to appear on the list of rules.
4. Optional. Provide a description.
5. To enable the rule later, click Disabled in the Status field.
   By default, a new script rule is Enabled when you configure it and click Save.
6. Select a Platform: Windows, Mac or Linux.
   All script rules are platform-specific.
7. Select a Script Definition, which determines how the script processor is identified.
   Note: PLATFORM NOTE: For Mac or Linux scripts, only Script Type and Process is allowed in this field.
8. For all Script rules, enter one or more Script Types.
   A Script Type is the file name definition for this script type, usually the asterisk followed by a dot and the file extension. To add more script types, after entering the first pattern in the Script Type field, clicking the down arrow to the right of the field. This displays the Add and Remove buttons, which allow you to add to (or remove from) the list of patterns shown.
9. Add one or more Script Processes for the Script Type and Process rules (Windows only) by using the Add button.
10. If you want to make sure all existing scripts matching this definition are added to the list of files tracked and controlled by Carbon Black App Control, check Rescan Computers box.
11. To keep your changes, click Save.

Results

The rule now appears on the Script rules table.

Edit a Script Rule

The procedure below describes how to edit a Script rule.

You edit a Script rule for a variety of reasons, including:

• Enabling or disabling the script.
• Adding, removing, or modifying patterns used to identify the script, or its processor.
• Changing the Script Definition to use File Association to identify the Script Processor, or to change from File Association to a specified processor patterns.

Prerequisites

If necessary, read the following information before you begin.

• To get familiar with the Script rule parameters, see Script Rule Parameters.
• For information on the effects of enabling or disabling a script, see Disabling or Deleting a Script Rule.

Procedure

1. On the console menu, navigate to the Rules > Software Rules page.
2. Click the Scripts tab and locate the Script rule you want to modify.
3. Click the View Details icon to the left of the specific rule in the Script rules table.
   The Edit Script Rule page appears.
4. Edit the rule as you choose and click Save.

Results

The Edit Script Rule page closes and you can view the modified rule in the Script rules table.