This documentation does not apply to the most recent version of uberAgent. Click here for the latest version.
uberAgent-ESA.conf
The following is the uberAgent-ESA.conf
configuration file that ships with uberAgent. It is the main include file for uberAgent ESA and includes other ESA config files in turn.
#
#
# This is the main configuration file for uberAgent ESA.
# It is only required if uberAgent ESA is enabled.
# Place it in the same directory as uberAgent.exe.
#
############################################
#
# Includes (config files to be processed, too)
#
############################################
# vast limits activity monitoring rules
@ConfigInclude uberAgent-ESA-am-vastlimits.conf
# Sigma process creation rules with level critical
@ConfigInclude uberAgent-ESA-am-sigma-proc-creation-critical.conf
# Sigma process creation rules with level high
@ConfigInclude uberAgent-ESA-am-sigma-proc-creation-high.conf
# Sigma process creation rules with level medium. Uncomment the next line to enable.
# @ConfigInclude uberAgent-ESA-am-sigma-proc-creation-medium.conf
# Sigma process creation rules with level low. Uncomment the next line to enable.
# @ConfigInclude uberAgent-ESA-am-sigma-proc-creation-low.conf