Pattern execution on ACC - check-allow-list.json manage commands (powershell)

[Tomas Pustka]

Hello,

 There is attached check-allow-list.json.zip file in KB1585764 which contains all possible commands to get application patterns working almost 1000 commands.

There is not commented which pattern is using which command. I tried to just include commands for one pattern only and it always failed.  

Does anyone know if is possible to manage somehow? To know which command, belong to pattern?

If I want to allow and disallow patterns using this allowlist file.

Commands in pd_command_list does not match with attached check-allow-list.json file.

Thanks!

Tomas P.

[Mark Smith5]

Ahoi,  I can help with your statement "Our infrastructure and security teams need to know, why each command is used and for which pattern".

1 Go to:  Pattern Designer > Supported Patterns for ACC

This is a list of Patterns that will be executed using ACC

2 Open a pattern

On the pattern default form there is a "List pattern commands" button.

This will help you get the commands executed for each pattern.

Note:  It will not help you build an allow list.  Nor will it help you with the "why each command" part.

[Tomas Pustka · Accepted solution]

Fixed by Pattern allowlist generator was shipped as part of Agent Client Collector - Visibility Content v1.5.0.