- Select
CONFIGURATION > fact sources
. - Press the
+ Create Source
button to open the source creation menu. - Replace
New source
in the textbox withbetter basic
. - Under
Facts
, press the+ new fact
button. - Enter a
Fact Trait
(ex: "host.file.path"). - Enter a
Value
(ex: "C:\Windows\System32\calc.exe"). - Press the
Save
button. - Under
Rules
, press the+ new rule
button. - Enter a
Fact Trait
(ex: "host.file.path"). - Next to
ALLOW
enter aMatch
(ex: "C:\Windows\System32\calc.exe"). - Press the
Save
button. - Task completed.