Skip to content

Commit

Permalink
Fix 8.13 bugs (#5002)
Browse files Browse the repository at this point in the history
* Remove screenshot of "Get started" page

* Emphasize that `is` doesn't support wildcards
  • Loading branch information
joepeeples authored Mar 28, 2024
1 parent 0d36c93 commit f0fafc8
Show file tree
Hide file tree
Showing 3 changed files with 1 addition and 3 deletions.
Binary file removed docs/getting-started/images/getting-started-pg.png
Binary file not shown.
2 changes: 0 additions & 2 deletions docs/getting-started/security-ui.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -174,8 +174,6 @@ image::images/users/users-page.png[Users page]

Quickly add security integrations that can ingest data and monitor your hosts.

image::images/getting-started-pg.png[Get started page]

[float]
=== Manage

Expand Down
2 changes: 1 addition & 1 deletion docs/management/admin/trusted-apps.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -40,7 +40,7 @@ To add a trusted application:
TIP: To find the signer's name for an application, go to *Kibana* -> *Discover* and query the process name of the application's executable (for example, `process.name : "mctray.exe"` for a McAfee security binary). Then, search the results for the `process.code_signature.subject_name` field, which contains the signer's name (for example, `McAfee, Inc.`).

* `Operator`: Select an operator to define the condition:
** `is`: Must be exactly equal to `Value`. This operation is required for the `Hash` and `Signature` field types.
** `is`: Must be _exactly_ equal to `Value`; wildcards are not supported. This operator is required for the `Hash` and `Signature` field types.
** `matches`: Can include wildcards in `Value`, such as `C:\path\*\app.exe`. This option is only available for the `Path` field type. Available wildcards are `?` (match one character) and `*` (match zero or more characters).

* `Value`: Enter the hash value, file path, or signer name. To add an additional value, click *AND*.
Expand Down

0 comments on commit f0fafc8

Please sign in to comment.