You can create a new category in two ways:
To create application categories, run the following command:
kesl-control --set-categories --file <path to configuration file>
where:
--file <path to configuration file> – path to the configuration file with the category settings.
The file with category settings must have the following structure:
[
{
"Exclude": ["(FilePath like <full path to the executable file>)", "(FileHash == <executable file hash>)"],
"GUID" : "<unique category ID>",
"Include" : [ "(FilePath like <full path to executable file>)", "(FileHash == <executable file hash>)" ],
"Name" : "<name of category 1>"
},
{
"Exclude": ["(FilePath like <full path to the executable file>)", "(FileHash == <executable file hash>)"],
"GUID" : "<unique category ID>",
"Include" : [ "(FilePath like <full path to executable file>)", "(FileHash == <executable file hash>)" ],
"Name" : "<name of category 2>"
}
]
To specify the file name in the Exclude and Include fields, you can use masks. The Name setting is required. If you do not specify the name of the category, it will not be created or will be deleted. The GUID setting is also required. If you do not specify it, an error is displayed and the category is not created. The GUID setting must be specified without hyphens.
To edit the list of created application categories, run the following command:
kesl-control --set-categories [--names <name of category 1> <name of category 2> ... <name of category N>] --file <path to configuration file>
where:
<name of category 1> <name of category 2> ... <name of category N> – names of the categories whose information you want to change. If you want to change information about several categories, specify the names of the categories, separated by a space. If you do not specify a category name, existing categories are deleted and new categories are created from the specified file.--file <path to configuration file> – path to the configuration file with the category settings.