getPolicyDetails: бодлогын дэлгэрэнгүй тохиргоо авах — 3-р хэсэг: Хариуны жишээ (2)
Энэ хуудсыг AI-аар орчуулж, автоматаар шалгасан. Нарийн тохиргоо хийхээсээ өмнө англи эхтэй тулгаж болно.
Энэ хэсэгт getPolicyDetails аргын хариуны (response) JSON жишээний үргэлжлэлийг харуулав. Талбаруудын утгыг үндсэн хуудасны тайлбараас үзнэ үү.
"exploitDetectionTechniques": [
{
"enable": true,
"name": 1,
"action": 1
},
{
"enable": true,
"name": 2,
"action": 1
}
]
},
{
"details": {
"applicationName": "Opera Browser",
"status": 1,
"processName": [
"Opera*.exe",
"Launcher*.exe"
]
},
"exploitDetectionTechniques": [
{
"enable": true,
"name": 1,
"action": 1
},
{
"enable": true,
"name": 2,
"action": 1
}
]
},
{
"details": {
"applicationName": "Apple Safari",
"status": 1,
"processName": [
"Safari.exe",
"WebKit2WebProcess.exe"
]
},
"exploitDetectionTechniques": [
{
"enable": true,
"name": 1,
"action": 1
},
{
"enable": true,
"name": 2,
"action": 1
}
]
},
{
"details": {
"applicationName": "Flash Player Container",
"status": 1,
"processName": [
"FlashPlayerPlugin*.exe",
"Plugin-container.exe"
]
},
"exploitDetectionTechniques": [
{
"enable": true,
"name": 1,
"action": 1
},
{
"enable": true,
"name": 2,
"action": 1
}
]
},
{
"details": {
"applicationName": "WinRAR Archiver GUI",
"status": 1,
"processName": [
"WinRAR.exe"
]
},
"exploitDetectionTechniques": [
{
"enable": true,
"name": 1,
"action": 1
},
{
"enable": true,
"name": 2,
"action": 1
}
]
}
],
"customApplications": [],
"systemWideDetections": {
"privilegeEscalationStatus": true,
"privilegeEscalation": 1,
"dpiDetectionsStatus": true,
"dpiDetections": 1,
"lsassMemoryAccessFromUnknownProcess": 3,
"lsassMemoryAccessFromUnknownProcessStatus": true
},
"linux": {
"systemWideDetections": {
"credentialsStatus": true,
"credentials": 0,
"ptraceStatus": true,
"ptrace": 0,
"namespaceStatus": true,
"namespace": 0,
"corruptionStatus": true,
"corruption": 0,
"permissionsStatus": true,
"permissions": 0
}
}
},
"dynamicThreatDefense": {
"enable": true,
"enableGlobalReportingForFiles": false,
"enableGlobalReportingForNetwork": false,
"actionforLocal": 5,
"actionforNetwork": 2,
"targetedAttack": {
"enable": true,
"detectionLevel": 2
},
"suspiciousFilesAndNetworkTraffic": {
"enable": true,
"detectionLevel": 2
},
"exploits": {
"enable": true,
"detectionLevel": 2
},
"ransomware": {
"enable": true,
"detectionLevel": 2
},
"grayware": {
"enable": true,
"detectionLevel": 2
}
},
"settings": {
"activateExclusions": {
"enable": false,
"exclusionsItems": [],
"useVendorExclusionLists": false,
"selectedVendorExclusionLists": [],
"exclusionsLists": [
{
"id": "66a0c6fd1889de5a2b006362",
"name": "p list 1",
"items": [
{
"type": 1,
"path": "C:\\folder\\file1",
"modules": [
1,
2
]
}
]
},
{
"id": "66a0c71a5725c4d79b0273e2",
"name": "p list 2",
"items": [
{
"type": 1,
"path": "C:\\folder\\file2",
"modules": [
1,
2
]
}
]
}
],
"useExclusionLists": true
},
"useBuiltInExclusions": true,
"deleteFilesOlderThan": 30,
"submitQuarantined": {
"enable": true,
"hours": 1
},
"rescanQuarantine": true,
"copyFilesToQuarantineBeforeDisinfect": true,
"allowUserQuarantineActions": true
},
"securityServers": {
"affinityRule": false,
"svaIps": [],
"useSSL": false,
"enableOnDemandSlots": false,
"svaProxy": {
"profile": 1
},
"serverOrder": "priority",
"svaMpAffinityRules": false
}
},
"networkSandboxing": {
"enabled": false,
"analysisMode": 1,
"remediationActions": {
"defaultAction": 3,
"fallbackAction": 2
},
"settings": {
"isCloudSandbox": true,
"ip": "",
"hostname": "",
"endpointId": null
},
"proxy": {
"enabled": false,
"settings": {
"server": "http://proxy",
"port": 12,
"username": "",
"password": ""
}
},
"contentPrefiltering": {
"categories": {
"applications": {
"enabled": true,
"level": 2
},
"documents": {
"enabled": true,
"level": 2
},
"scripts": {
"enabled": true,
"level": 2
},
"archives": {
"enabled": true,
"level": 2
},
"emails": {
"enabled": true,
"level": 2
}
},
"excludeExtensions": [],
"sizeFilter": {
"enabled": false,
"fileMinSizeKB": 100,
"fileMaxSizeMB": 3
}
}
},
"edrSensor": {
"general": {
"enabled": true
}
},
"firewall": {
"settings": {
"enable": true,
"blockPortScan": true,
"allowInternetConnectionSharing": false,
"monitorWiFiConnections": false,
"logVerbosity": {
"enable": true,
"level": 1
},
"instructionsDetectionSystem": {
"enable": false,
"profile": 2
},
"exclusions": {
"enable": false,
"duplicateToNetworkProtection": true,
"items": []
}
},
"network": {
"adapters": [
{
"type": "Wired",
"networkType": 2,
"stealthMode": 2
},
{
"type": "Wireless",
"networkType": 3,
"stealthMode": 2
},
{
"type": "Virtual",
"networkType": 1,
"stealthMode": 2
}
]
},
"advanced": {
"protectionLevel": 4,
"createAgresiveRules": false,
"createRulesForAppsBlockedByIDS": true,
"monitorProcessChanges": true,
"ignoreSignedProcesses": true,
"rule": [
{
"ruleId": "ca0ef9c7-6a47-484e-9dd9-13098b264c51",
"defaultRule": 1,
"type": 1,
"ruleType": 1,
"details": {
"name": "Incoming ICMP",
"applicationPath": "system",
"commandLine": "",
"applicationMd5": ""
},
"settings": {
"localAddress": {
"any": true,
"portRange": ""
},
"remoteAddress": {
"any": true,
"portRange": ""
},
"directlyConnected": {
"enable": false
},
"protocol": 4,
"customProtocol": "1",
"direction": 1,
"ipVersion": 2
},
"permission": {
"home": true,
"public": true,
"setPermission": 1
},
"enabled": true
},
{
"ruleId": "055fa434-1673-4b79-bffa-beb24f4d97c1",
"defaultRule": 1,
"type": 2,
"ruleType": 1,
"details": {
"name": "Incoming ICMPV6",
"applicationPath": "system",
"commandLine": "",
"applicationMd5": ""
},
"settings": {
"localAddress": {
"any": true,
"portRange": ""
},
"remoteAddress": {
"any": true,
"portRange": ""
},
"directlyConnected": {
"enable": false
},
"protocol": 4,
"customProtocol": "58",
"direction": 1,
"ipVersion": 3
},
"permission": {
"home": true,
"public": true,
"setPermission": 1
},
"enabled": true
},
{
"ruleId": "b5f950e4-bdf8-47a7-bc8a-f6bab22e0d80",
"defaultRule": 1,
"type": 3,
"ruleType": 2,
"details": {
"name": "Incoming Remote Desktop Connections",
"applicationPath": "",
"commandLine": "",
"applicationMd5": ""
},
"settings": {
"localAddress": {
"any": true,
"portRange": "3389"
},
"remoteAddress": {
"any": true,
"portRange": ""
},
"directlyConnected": {
"enable": false
},
"protocol": 2,
"direction": 2,
"ipVersion": 1
},
"permission": {
"home": true,
"public": true,
"setPermission": 1
},
"enabled": true
},
{
"ruleId": "360be232-46e8-49df-bed7-c42e0e5c5b4a",
"defaultRule": 1,
"type": 4,
"ruleType": 2,
"details": {
"name": "Sending E-mails",
"applicationPath": "",
"commandLine": "",
"applicationMd5": ""
},
"settings": {
"localAddress": {
"any": true,
"portRange": ""
},
"remoteAddress": {
"any": true,
"portRange": "25;143;465;587;993"
},
"directlyConnected": {
"enable": false
},
"protocol": 2,
"direction": 3,
"ipVersion": 1
},
"permission": {
"home": true,
"public": true,
"setPermission": 1
},
"enabled": true
},
{
"ruleId": "ac668a0f-1a1c-467e-8415-3a9f158288b9",
"defaultRule": 1,
"type": 5,
"ruleType": 1,
"details": {
"name": "Web Browsing HTTP",
"applicationPath": "",
"commandLine": "",
"applicationMd5": ""
},
"settings": {
"localAddress": {
"any": true,
"portRange": ""
},
"remoteAddress": {
"any": true,
"portRange": "80;443"
},
"directlyConnected": {
"enable": false
},
"protocol": 2,
"direction": 3,
"ipVersion": 1
},
"permission": {
"home": true,
"public": true,
"setPermission": 1
},
"enabled": true
},
{
"ruleId": "789e0858-690b-4bae-a204-c7416516882c",
"defaultRule": 1,
"type": 6,
"ruleType": 1,
"details": {
"name": "Network Printing",
"applicationPath": "%system%\\spoolsv.exe",
"commandLine": "",
"applicationMd5": ""
},
"settings": {
"localAddress": {
"any": true,
"portRange": ""
},
"remoteAddress": {
"any": true,
"portRange": "20;21;35;80;92;161;162;170;515;631;1314;1392;2081;2291;3096;3396;3800;3910;3911;4088;4168;4391;4392;4393;4394;5309;6716;7228;8033;8100;8609;9100;10631;40404"
},
"directlyConnected": {
"enable": false
},
"protocol": 1,
"direction": 3,
"ipVersion": 1
},
"permission": {
"home": true,
"public": true,
"setPermission": 2
},
"enabled": true
},
{
"ruleId": "b0b73273-db41-413a-ac03-36d969cd290b",
"defaultRule": 1,
"type": 7,
"ruleType": 1,
"details": {
"name": "Windows Explorer Traffic on FTP",
"applicationPath": "%windir%\\explorer.exe",
"commandLine": "",
"applicationMd5": ""
},
"settings": {
"localAddress": {
"any": true,
"portRange": ""
},
"remoteAddress": {
"any": true,
"portRange": "20;21"
},
"directlyConnected": {
"enable": false
},
"protocol": 2,
"direction": 1,
"ipVersion": 1
},
"permission": {
"home": true,
"public": true,
"setPermission": 2
},
"enabled": true
},
{
"ruleId": "d15889dd-5528-455f-8f3f-2a0fa2226ab2",
"defaultRule": 1,
"type": 8,
"ruleType": 1,
"details": {
"name": "Windows Explorer Traffic on HTTP",
"applicationPath": "%windir%\\explorer.exe",
"commandLine": "",
"applicationMd5": ""
},
"settings": {
"localAddress": {
"any": true,
"portRange": ""
},
"remoteAddress": {
"any": true,
"portRange": "80;443"
},
"directlyConnected": {
"enable": false
},
"protocol": 2,
"direction": 3,
"ipVersion": 1
},
"permission": {
"home": true,
"public": true,
"setPermission": 2
},
"enabled": true
}
]
}
},
"contentControl": {
"webAccess": {
"enable": true,
"profileType": 3,
"useExceptions": true,
"webRules": [],
"scheduler": []
},
"webCategoriesFilter": {
"profileType": 3,
"schedule": {
"id": "669fa9fa2e5ac2030cafc395",
"name": "p schedule 10",
"subschedules": [
{
"name": "1",
"enableDetailedAlerts": true,
"action": 2,
"days": [
1
],
"categories": [],
"timeInterval": {
"startHour": 0,
"startMinute": 0,
"endHour": 23,
"endMinute": 59
}
}
]
},
"enableDetailedAlerts": true,
"treatAsExceptions": false,
"enable": true,
"settings": {
"ads": 1,
"advice": 1,
"alcohol": 1,
"astrology": 1,
"auto": 1,
"blogs": 1,
"business": 1,
"computersAndSoftware": 1,
"education": 1,
"entertainment": 1,
"fileSharing": 1,
"banks": 1,
"food": 1,
"gambling": 1,
"games": 1,
"government": 1,
"hacking": 1,
"violence": 1,
"healthMedicine": 1,
"hobbies": 1,
"hosting": 1,
"illegal": 1,
"im": 1,
"jobSearch": 1,
"kids": 1,
"lifeStyle": 1,
"matureContent": 1,
"narcotics": 1,
"news": 1,
"occult": 1,
"onlineDating": 1,
"onlinePayment": 1,
"pets": 1,
"pharmacy": 1,
"onlinePhoto": 1,
"pornography": 1,
"portals": 1,
"radioMusic": 1,
"realEstate": 1,
"cultReligions": 1,
"scams": 1,
"searchEngines": 1,
"onlineShopping": 1,
"socialNetworks": 1,
"society": 1,
"sports": 1,
"suicide": 1,
"tabloids": 1,
"timeWasters": 1,
"tobacco": 1,
"travel": 1,
"photosVideos": 1,
"weapons": 1,
"webMail": 1,
"webProxy": 1
}
},
"antiphishing": {
"enable": true,
"defaultAction": 1,
"settings": {Энэ хуудсанд гарсан нэр томъёо
- Network
- Таны байгууллагын бүх төхөөрөмжийн жагсаалт (Inventory)
- Exclusions
- Шалгалтаас хасах файл, хавтас, процесс