Table of Contents
Advertisement
Icon
N/A
14.4.6 Documenting a Solution Pack
"Implementation Steps" on page 338
"Testing Steps" on page 338
Implementation Steps
You need to add the steps required to implement the content in the target Sentinel system to the
Implementation tab of the Documentation frame. The steps might include instructions for the
following types of implementation actions:
Populating a
Enabling auditing on source devices.
Copying an attached script for an Execute Command correlation action to the appropriate
location on the correlation engines.
After the content implementation, the content should be tested to verify that it is working as
expected.
Testing Steps
You need to add the steps required to test the content in the target Sentinel system to the Testing tab
of the Documentation frame. The steps can include instructions for the following types of testing
activities:
Run a report and verify that data is returned.
Generate a failed login on a critical server and verify that a correlated event is created and
assigned to an iTRAC workflow.
338 Sentinel 6.1 Rapid Deployment User Guide
Name
Description
View
Views an attachment.
Select a node, right-click the attachment in the Attachment panel, then
select View File. The file displays in the associated application.
Rename
Renames an attachment.
Select a node, right-click the attachment in the Attachment panel, then
select Rename. Specify the new name and click OK.
Delete
Deletes an attachment.
Select a node, right-click the attachment in the Attachment panel, then
select Delete. Click OK to delete.
Save
Save a copy of the attachment to the local system.
Select a node, right-click the attachment in the Attachment panel, then
and select Save As. Select a file location and click Save.
file that is used by the mapping service for event enrichment.
.csv
Advertisement
Table of Contents
