Optional common sections

A rule’s common optional sections and their values include the items below. For optional sections relevant to the class section that is selected, see the class section under Windows custom signatures. The keywords Include and Exclude are used for dependencies and attributes. Include means that the section works on the value indicated, and Exclude means that the section works on all values except the one indicated. include the following

Section
Value
Description
dependencies -c -d
 
{Include/Excludeid of a rule}
Defines dependencies between rules and prevents the triggering of dependent rules. Only switches –c and –d are used.
attributes -c -d
{Include/Exclude “-v}
Holds the Vault (–v) option. Only switches –c and –d are used. Use the Vault option in rules that should be treated as Vault signature. A “Vaulted” rule blocks the action it monitors regardless of Level Modifiers and Policies, if the agent is operating in SecureSelect-Vault Mode.

Copyright © 2006 McAfee, Inc. All Rights Reserved.