Creating or Editing a Custom Script Rule

Create custom script rules to identify files to be tracked and managed as scripts by Carbon Black App Control. You can a edit script rule to further specify your requirements, or to enable or disable the script.

For information about script rule parameters, see Script Rule Parameters.

Create a Custom Script Rule

This procedure describes how to create a custom script rule.

For a description of the Script rule parameters, see Script Rule Parameters.

  1. On the console menu, navigate to the Rules > Software Rules page.

    The Software Rules page appears.

    The Software Rules page showing the Scripts tab with the Add Script Rule button highlighted

  2. Click the Scripts tab, and click Add Script Rule.

    The Add Script Rule page appears.

    The Add Script Rule page

  3. In the Rule Name field, enter the name you want to appear on the list of rules.
  4. Optional. Provide a description.
  5. To enable the rule later, click Disabled in the Status field.
    By default, a new script rule is Enabled when you configure it and click Save.
  6. Select a Platform: Windows, Mac or Linux.
    All script rules are platform-specific.
  7. Select a Script Definition, which determines how the script processor is identified.
    Note: PLATFORM NOTE: For Mac or Linux scripts, only Script Type and Process is allowed in this field.
  8. In the Script Type, enter the file name definition for this script type.
    This pattern is usually an asterisk followed by a dot and the file extension. To add more script types after entering the first pattern, click the down arrow to the right of the field. Use the Add and Remove buttons to add or remove patterns, as needed.
  9. In the Script Process field, add one or more script processes for the Script Type and Process rules (Windows only) by using the Add button.
  10. If you want to make sure all existing scripts matching this definition are added to the list of files tracked and controlled by Carbon Black App Control, check the Rescan Computers box.
  11. To save the rule, click Save and Exit.

The rule now appears on the Script rules table.

Edit a Script Rule

The procedure below describes how to edit a Script rule.

If necessary, read the following information before you begin.
You edit a Script rule for a variety of reasons, including:
  • Enabling or disabling the script.
  • Adding, removing, or modifying patterns used to identify the script, or its processor.
  • Changing the Script Definition to use File Association to identify the Script Processor, or to change from File Association to a specified processor patterns.
  1. On the console menu, navigate to the Rules > Software Rules page.
  2. Click the Scripts tab and locate the Script rule you want to modify.
  3. Click the View Details icon to the left of the specific rule in the Script rules table.
    The Edit Script Rule page appears.
  4. Edit the rule as you choose and click Save.

The Edit Script Rule page closes and you can view the modified rule in the Script rules table.