26.2 Solution Pack Components

Solution Packs consist of categories, controls, content, and content groups, all in a hierarchy of related components.

The following table describes each level in a Solution Pack hierarchy.

Table 26-1 Solution Pack Hierarchy Levels

Solution Pack

A Solution Pack is the root node in the content hierarchy. Each Solution Pack can contain one or multiple Category nodes.

Category

A category is a conceptual classification. Each Category can contain one or multiple controls.

Control

A control is another level of classification, which often corresponds to a particular control defined by a set of regulations. Each control can contain one or multiple content groups.

N/A

Content Group

A content group is a set of related content. There are several types of content groups, such as reports, Correlation rules, and event configurations, each with its own icon.

The following table describes the types of content groups and what the content that they contain:

Table 26-2 14‑2: Content Groups

Event Configuration

A content group that contains a map definition and the configuration of one or more related Sentinel meta tags.

This icon is also used for the meta tag configuration definition.

Map

A map definition instance.

Workflow

An iTRAC Workflow template and any associated roles.

This icon is also used for the iTRAC workflow template itself.

Role

A role used in a workflow.

Correlation Rule

A Correlation rule, the namespace in which it is stored, and any associated Correlation actions or Dynamic Lists.

This icon is also used for the Correlation rule definition.

Namespace

A namespace instance in which the Correlation rule is stored

JavaScript Action Plugin

A JavaScript action plug-in.

JavaScript Action

A configured JavaScript action instance.

Integrator Plugin

An Integrator plug-in.

Integrator

A configured Integrator instance.

Action

An action configuration for a Correlation action.

Correlation Rule Deployment

The Correlation rule deployment.

Report

A report.

This icon is also used for the .rpt report file.

Dynamic List

A Dynamic List.