Tag Management Page
The Tag Management page displays all tags that are currently managed by the application, including out-of-the-box and custom tags. You can add tags and assign objects to those tags.
The out-of-the-box tags include:
- Administrator – An administrator user account
- Automated Account – An account with automated authentication behavior detected
- Computer Account – A computer account
- Domain Admin – An Active Directory domain administrator account
- Domain Controller – An Active Directory domain controller account
- Global Catalog – An Active Directory global catalog object
- Honeypot – Tags objects to be included in Honeypot detection
- Privileged – A member of a sensitive group. These users typically have access to sensitive systems and data and can execute actions that could impact the security, stability, and operation of the network or domain.
- Read-Only Domain Controller – A read-only Active Directory domain controller account
- Sensitive – A group that has elevated permissions or administrative rights. A member of these groups have the ability to perform critical tasks that can affect the security, configuration, and operation of the entire network or domain.
- Service Account – An Active Directory service account
- Stale – An Active Directory user account marked as stale
- Watchlist – Watchlist users
NOTE: Any users with the Watchlist tag will be displayed on the Threat Manager Home Page Watchlist.
The table displays the following information for available tags:
- Name – The name of the tag
- Description – The description for the tag
- Created – Date timestamp when the tag was created
- Created By – The user account that created the tag
- Members – Number of tagged objects
Add New Tags
Follow the steps to add a custom tag.
Step 1 – Use the gear icon in the upper right corner of the console to open the Configuration menu. Then select Integrations to open the Integrations interface.
Step 2 – On the Integrations interface, click Add New Integration in the navigation pane. The Add New Integration window opens.
Step 3 – In the Type drop-down menu, select Tag.
Step 4 – Enter the following information:
- Name – Provide a unique, descriptive name for the tag
- Description – Provide a description for the tag
Step 5 – Click Add. The Add New Integration window closes.
The tag is listed in the Integrations navigation pane. It can now be applied to objects.
Tag Details Page
Follow the steps to view the details of a tag.
Step 6 – Use the gear icon in the upper right corner of the console to open the Configuration menu. Then select Integrations to open the Integrations interface.
Step 7 – On the Integrations interface, click Tag Managemetn in the navigation pane to view a list of tags.
Step 8 – Select a tag from the table or the navigation pane to view its details.
This page provides the following information:
- Name – The tag name. Type in the field to modify the name.
- Description – The tag description. Type in the field to modify the description.
- Delete Tag button – This button is only enabled for custom tags. Out-of-the-box tags cannot be deleted. You will be asked to confirm the action.
- Search box – Search for objects in the Untagged Items box and the Tagged Items box by typing in the textbox. You can search for user objects, group objects, file objects, or computer objects.
- Types – The drop-down menu provides object type filter options that apply to the search box results. When a search is not being conducted, the filter types apply to the Tagged Items box.
- Untagged Items box – Displays objects that match the search text. This box is blank when a search is not performed.
- Tagged Items box – Lists objects with this tag applied
Use the Type Filter
On the tag details window, click the Type drop-down menu to apply a filter.
RECOMMENDED: Apply the desired Type filters when searching for objects to tag.
The following types are available:
- Users – Active Directory user objects
- Groups – Active Directory group objects
- Files – File objects
- Computers – Active Directory computer objects
The tagged items and untagged items lists on the window will be filtered to the selected object types.
Apply Tags to Objects
Follow the steps to apply tags to objects.
Step 1 – On the Integrations interface, click Tag Managemetn in the navigation pane to view a list of tags.
Step 2 – Select a tag from the table or the navigation pane.
Step 3 – On the Tag details page, use the search box to conduct a search for the object name.
Step 4 – Use the Type drop-down menu to apply the desired object type filter to the search results.
Step 5 – In the Untagged Items box, check the box to the left of the desired object(s).
Step 6 – Click the arrow () between the Untagged Items box and the Tagged Items box to add the tag to the selected object(s).
The tag is applied to the selected objects.
Remove Tags From Objects
Follow the steps to remove tags from objects.
Step 1 – On the Integrations interface, click Tag Managemetn in the navigation pane to view a list of tags.
Step 2 – Select a tag from the table or the navigation pane.
Step 3 – On the Tag details page, use the search box to conduct a search for the object name.
Step 4 – Use the Type drop-down menu to apply the desired object type filter to the search results.
Step 5 – In the Tagged Items box, check the box to the left of the desired object(s).
Step 6 – Click the arrow (<) between the Untagged Items box and the Tagged Items box to remove
the tag from the selected object(s).
The tag is removed from the selected objects.
About Threat Manager Page
The About Threat Manager page in the System Settings interface provides information about the application version and third-party licenses.
The About Threat Manager section contains application version information. It also includes the application copyright information.
The Third-Party Licenses section contains a list of all third-party licenses in use by the application. Each component and its license is listed.
- To view the details for a specific license, click the arrow icon on its left to expand the license details.
- To view the details for all licenses, click the Expand All button.
- To view the third-party's license page, click the corresponding external link icon.
System Settings Interface
The System Settings interface provides access to system logs, user access controls, licensing, and more.
Use the gear icon in the upper right corner of the console to open the Configuration menu. Then select System Settings to open the System Settings interface.
It contains the following pages: