Rule Configuration Logic
The rule configuration logic offers a systematic method for applying policy rules to events. The system prioritizes the most specific events and progresses through these levels of specificity:
-
URL
-
Application
-
Domain
-
Category
-
All
Scenarios
Scenario 1: User attempts to upload a file to
https://domain1.com/url1.html
Specific Event: Most specific event is the URL https://domain1.com/url1.html.
Result:
Scenario 2: User attempts to upload a file to
https://domain1.com/url2.html
Specific Event: Most specific event is the URL https://domain1.com/url2.html.
Result:
Scenario 3: User attempts to upload a file to
https://domain1.com/url3.html
Specific Event: Most specific event is the Domain domain1.com.
Result:
Scenario 4: User attempts to upload a file to
https://domain2.com/url.html
Specific Event: The Category of domain2.com is Computers /
Internet. Since there are no specific events for the URL or Domain, the
Category event is selected.
Result:
Scenario 5: User attempts to upload a file to
https://domain3.com/url.html
Specific Event: The Category of domain3.com is Education.
Since there are no specific events for the URL or Domain, the
Category event is selected.
Result:
Scenario 6: User attempts to upload a file to
https://domain4.com/url.html
Specific Event: Since there are no specific events for the URL, Domain, or Category, the event with the destination All is selected.
Result:
Scenario 7: In Grammarly, user
attempts to paste a secret API Key
Specific Event: Most specific event is the Application Grammarly.
Result:
Scenario 8: In ChatGPT, user attempts
to paste the text that do not contain an IP address
Specific Event: Most specific event is the Application ChatGPT.
Result:
Scenario 9: In ChatGPT, user attempts
to paste the text that contain an IP address
Specific Event: Most specific event is the Application ChatGPT.
Result:
Scenario 10: In Gemini, user attempts
to paste the text that do not contain an IP address
Specific Event: Most specific event is the Category Artificial Intelligence (AI).
Result:
When multiple events are relevant for the same incident, the events with the strict action is selected.
Scenario 11: User attempts to upload a file to
https://domain5.com/url.html
Specific Event: The Category of domain5.com are Computers /
Internet and Education. Since there are no events for the URL or Domain,
only two events for the Category are relevant, and the system
selects the event with stricter action.
Result:
Scenario 12: User attempts to upload a file to
https://domain1.com
Specific Event: Since there are no events for the URL, only two events for the Domain domain1.com are relevant.
Result: