Import Custom Rules

The custom rules are contained in two files, High_Risk_Device.xml and UEBA_Fabric.xml.

Download links:

• High_Risk_Device.xml

• UEBA_Fabric.xml.

To import these two customized rule sets, take the following steps:

Import High_Risk_Device.xml Rule

1. Navigate to RESOURCES > Rule > Security.

2. Click Import, and select the High_Risk_Device.xml file, and click Import.

Import UEBA_Fabric.xml Rule

1. Navigate to RESOURCES > Rules > Security > UEBA.

2. In the upper part of the left pane, click the + icon to create a new folder/group.

3. In the Group field, enter "Fabric".

4. IClick Save.

5. Navigate to RESOURCES > Rules > Security > UEBA > Fabric, which is your newly created folder/group.

6. Click Import, and select the UEBA_Fabric.xml file, and click Import.