- Get Started with Attack Surface Insights
- View Entities in Attack Surface Insights
- Search for Entities in Attack Surface Insights
- Edit Entities in Attack Surface Insights
- Entity Attributes
Edit an Attack Surface Insights Rule
Change the name, description, condition, actions, and enabled status for an Attack Surface Insights rule.
You can only edit the description and conditions of a pre-built rule. You can't edit the name and actions of a pre-built rule.
In Attack Surface Insights, click Set Rules.
For a rule, click the More menu
, then select Edit.Edit the rule properties:
Rule name – Enter the rule name.
Description – Enter a description of the rule.
Entity Type – Verify the entity type to which the rule applies.
Condition – Determine the events on which your rule triggers using search. Like searching for an entity, you can choose to build or enter a query.
Actions – Specify the tags and security criticality assigned to relevant entities when the rule triggers.
In Tags, specify up to 20 tags. Select from the list of existing tags or create a new one. To create a new tag, start typing, then click Add "<tag>".
In Security Criticality, select a security criticality: Low, Medium, or High.
Enabled – If the rule is automatically enabled after it's edited, select the checkbox.
Click Save.