Solution Packs consist of categories, controls, content, and content groups, all in a hierarchy of related components.
The following table describes each level in a Solution Pack hierarchy.
Table 26-1 Solution Pack Hierarchy Levels
Solution Pack |
A Solution Pack is the root node in the content hierarchy. Each Solution Pack can contain one or multiple Category nodes. |
|
Category |
A category is a conceptual classification. Each Category can contain one or multiple controls. |
|
Control |
A control is another level of classification, which often corresponds to a particular control defined by a set of regulations. Each control can contain one or multiple content groups. |
|
N/A |
Content Group |
A content group is a set of related content. There are several types of content groups, such as reports, Correlation rules, and event configurations, each with its own icon. |
The following table describes the types of content groups and what the content that they contain:
Table 26-2 14‑2: Content Groups
Event Configuration |
A content group that contains a map definition and the configuration of one or more related Sentinel meta tags. This icon is also used for the meta tag configuration definition. |
|
Map |
A map definition instance. |
|
Workflow |
An iTRAC Workflow template and any associated roles. This icon is also used for the iTRAC workflow template itself. |
|
Role |
A role used in a workflow. |
|
Correlation Rule |
A Correlation rule, the namespace in which it is stored, and any associated Correlation actions or Dynamic Lists. This icon is also used for the Correlation rule definition. |
|
Namespace |
A namespace instance in which the Correlation rule is stored |
|
JavaScript Action Plugin |
A JavaScript action plug-in. |
|
JavaScript Action |
A configured JavaScript action instance. |
|
Integrator Plugin |
An Integrator plug-in. |
|
Integrator |
A configured Integrator instance. |
|
Action |
An action configuration for a Correlation action. |
|
Correlation Rule Deployment |
The Correlation rule deployment. |
|
Report |
A report. This icon is also used for the .rpt report file. |
|
Dynamic List |
A Dynamic List. |