Save Rule: Click this button to save your rule. You can click this button to create custom conditions that emails must meet to be detected by the rule. New Condition Group: This button is only available when the Custom conditions option is selected. See our How Do I Create Strings and Conditions in the Basic Editor? article for more information. Custom conditions: Select this option to detect emails that match your custom conditions. Match all of the defined strings: Select this option to detect emails that match all of your defined strings. Match any of the defined strings: Select this option to detect emails that match any of your defined strings. You can select from the following options: Conditions are used to express what emails you want your rule to detect. Create Conditions: Create conditions by selecting how your defined strings should relate to each other. You can create up to five strings per rule. New String: Click this button to add a string to the rule. For more information about creating strings in the Basic Editor, see our How Do I Create Strings and Conditions in the Basic Editor? article. Create Strings: Create and define strings to use when creating your conditions. Editing a rule in the Advanced Editor will disable the Basic Editor for that rule. Basic Editor: Click this tab to create a YARA rule using the Basic Editor. PhishER rules will only follow YARA Rule logic to disposition emails. YARA Rule Editor: Use this space to create your YARA Rule using either the Basic Editor or Advanced Editor. By default, the rule will have Raw set as the target. The targets include Raw, Headers, Body, or Attachments. You may choose one of four targets from the drop-down menu. Choose Target: Select the part of the message you would like the rule to be applied to or run against. Click outside of the Add new tag field to create the tag. Edit Tags: Add a custom tag that you would like to see attached to a message if the message matches this specific rule. As a best practice, we recommend that you enter a brief description of the rule's intended behavior. Description (optional): Enter a description of your rule. 
The name cannot start with a numerical value, exceed 128 characters, or be one of these keywords. We recommend that you enter a name that reflects the intended behavior of the rule.
Name: Enter a unique name for your rule. PHISH HD TAG HOW TO
To learn how to create a rule using the Basic Editor, see the screenshot and list below: The Basic Editor guides you through creating a custom rule. How to Create a Rule Using the Basic Editor To learn how to create a rule using the Basic Editor or the Advanced Editor, see the subsections below. Messages received prior to your rule change(s) will not be affected. Then, all enabled rules will run against incoming messages. Note: For all rule changes to be acknowledged, you must click the Apply Changes button. Then, copy and paste the logic of the System Rule into the rule editor of your Custom Rule. If you would like to edit a System Rule, create a new Custom Rule. To edit a Custom Rule, click on the Name or Description of the rule from the Rules List. On this page, you can create a rule using either the Basic Editor or the Advanced Editor. When you click the button, the Rule Details screen will open.
Click the New Rule button at the top-right corner of the page. To create a rule in PhishER, follow the steps below: YARA is a tool used to identify and classify malware samples. 
All custom rules must follow Yet Another Recursive/Ridiculous Acronym ( YARA) logic. To create your rules, you can use either the Basic Editor or Advanced Editor. You can create custom rules in your PhishER platform to disposition emails forwarded to your PhishER inbox.
How to Create a Rule Using the Advanced Editor. How to Create a Rule Using the Basic Editor. See below for detailed information about how to create rules and actions in PhishER.
0 kommentar(er)
