Exclude Top Secret Command DIAGTRAP in Compliance Event Manager Event Based Policy
book
Article ID: 270483
calendar_today
Updated On:
Products
Compliance Event Manager
Top Secret
Issue/Introduction
What is needed to prevent the DIAGTRAP command from generating alerts in the CEM alert Event Based Policy?
Resolution
Specify Statement Criteria in the Event-Based Policy Statement that says "Command" "does not contain" "DIAGTRAP"
Feedback
thumb_up
Yes
thumb_down
No