Skip to content

Commit

Permalink
Update docs/05.policy/08.responserules/08.responserules.md
Browse files Browse the repository at this point in the history
Co-authored-by: Sunil Singh <[email protected]>
  • Loading branch information
gtam and sunilarjun committed Nov 1, 2024
1 parent fe083a6 commit 960c641
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion docs/05.policy/08.responserules/08.responserules.md
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,7 @@ Response Rules provide a flexible, customizable rule engine to automate response

Creating a new Response Rule using the following:

+ Group. A rule will apply to a container Group (address group is not supported, for example criteria address=x.x.x.x/x). Please see the section Run-Time Security Policy -> Groups for more details on Groups and how to create a new one if needed.
+ Group. A rule will apply to a container Group (address group is not supported, for example, criteria address=x.x.x.x/x). Please see the section [Run-Time Security Policy -> Groups](../04.groups/04.groups.md) for more details on Groups and how to create a new one if needed.
+ Category. This is the type of event, such as Security Event, or CVE vulnerability scan result.
+ Criteria. Specify one or more criteria. Each Category will have different criteria which can be applied. For example, by the event name, severity, or minimum number of high CVEs.
+ Action. Select one or more actions. Quarantine will block all network traffic in/out of a container. Webhook requires that a webhook endpoint be defined in Settings -> Configuration. Suppress log will prevent this event from being logged in Notifications.
Expand Down

0 comments on commit 960c641

Please sign in to comment.