Help Center> Host Security Service (Old)> User Guide> Audit> HSS Operations Supported by CTS
Updated on 2022-08-30 GMT+08:00

HSS Operations Supported by CTS

Table 1 lists HSS operations recorded by CTS.

Table 1 HSS operations that can be recorded by CTS

Operation

Resource Type

Trace Name

Enabling HSS

hss

openHssProtect

Disabling HSS

hss

closeHssProtect

Starting a manual detection

hss

manualDetection

Unblocking an IP address

hss

unblockIp

Configuring common login locations

hss

setCommonLocation

Configuring a login IP address whitelist

hss

setWhiteIpList

Enabling or disabling a login IP address whitelist

hss

switchWhiteIpList

Ignoring a port

hss

ignorePort

Unignoring a port

hss

noIgnorePort

Ignoring a risky configuration

hss

ignoreConfigRisky

Unignoring a risky configuration

hss

notIgnoreConfigRisky

One-click vulnerability fix

hss

repairVul

Verifying a vulnerability

hss

verifyVul

Waiting for system restart and verification after one-click fix

hss

confirmVul

Ignoring a software vulnerability

hss

ignoreVul

Unignoring a software vulnerability

hss

notIgnoreVul

Enabling a firewall

HSS

turnonFirewall

Enabling WTP

HSS

openWtp

Disabling WTP

hss

stopWtp

Adding a protected directory to WTP

hss

addWtpDir

Removing a protected directory from WTP

hss

deleteWtpDir

Changing a protected directory in WTP

hss

modifyWtpDir

Suspending protection for a protected directory in WTP

hss

suspendWtpDir

Resuming protection for a protected directory in WTP

hss

resumeWtpDir

Setting a backup server for WTP

hss

setWtpBackupHost

Setting remote backup for WTP

hss

setWtpRemoteBackup

Adding a privileged process in WTP

hss

addWtpPrivilegedProcess

Removing a privileged process from WTP

hss

deleteWtpPrivilegedProcess

Modifying a privileged process in WTP

hss

modifyWtpPrivilegedProcess

Enabling two-factor authentication

hss

turnOnTwoFactor

Disabling two-factor authentication

hss

turnOffTwoFactor

Changing the topic for two-factor authentication

hss

modifyTwoFactorTopic

Ignoring web shells

hss

ignoreWebShell

Unignoring web shells

hss

notIgnoreWebShell

Uninstalling the agent

hss

unInstall

Setting a protection mode in WTP

hss

setProtectMode

Adding a protected file system in WTP

hss

addFileSystem

Removing a protected file system from WTP

hss

delFileSystem

Modifying a protected file system in WTP

hss

modifyFileSystem

Suspending protection for a file system in WTP

hss

suspendFileSystem

Resuming protection for a file system in WTP

hss

resumeFileSystem

Enabling unprotected periods in WTP

hss

turnonTimedStopProtect

Disabling unprotected periods in WTP

hss

turnoffTimedStopProtect

Setting unprotected periods in WTP

hss

setTimedStopDate

Adding unprotected periods in WTP

hss

addTimerRange

Modifying unprotected periods in WTP

hss

modifyTimerRange

Deleting unprotected periods from WTP

hss

delTimerRange

Setting WTP alarms

hss

setWtpAlertConfig

Enabling dynamic WTP

hss

turnonRasp

Disabling dynamic WTP

hss

turnoffRasp

Subscribing to reports

hss

subSafetyReport

Automatically isolating and killing malicious programs

hss

turnOnMPAutomatic

Stop isolating and killing malicious programs

hss

turnOffMPAutomatic

Importing the alarm whitelist

hss

importAlarmWhitelist

Removing alarms from whitelist

hss

deleteAlarmWhitelist

Exporting the alarm whitelist

hss

exportAlarmWhitelist

Managing the login whitelist

hss

operateLoginWhitelist

Managing events

hss

operateEventStatus

Cancel file isolation

hss

deleteProcessIsolationRule

Modifying a policy group

hss

modifyPolicyGroup

Removing a policy group

hss

deletePolicyGroup

Copying a policy group

hss

copyPolicyGroup

Modifying a policy group

hss

modifyPolicyContent

Applying a policy

hss

deployPolicyGroup

Adding a server group

hss

addHostGroup

Deleting a server group

hss

deleteHostGroup

Modifying a server group

hss

modifyHostGroup

Adding a server to a group

hss

insertHostGroup

Enabling or disabling file integrity management

hss

switchKeyfiles

Manage application recognition events

hss

operateAppWhiteListEvent

Creating a whitelist policy

hss

replaceAppWhiteListPolicy

Enabling or disabling a whitelist policy

hss

switchAppWhiteListPolicy

Deleting a whitelist policy

hss

deleteAppWhiteListPolicy

Managing whitelisted applications

hss

operateAppWhiteListPolicyApp

Removing a server associated with a policy

hss

deleteAppWhiteListHostInfo

Associating servers

hss

addAppWhiteListHostInfo

Managing ransomware events

hss

operateAppRansomEventInfo

Creating or editing a ransomware prevention policy

hss

replaceAppRansomPolicyInfo

Deleting a ransomware prevention policy

hss

deleteAppRansomPolicyInfo

Marking the ransomware status of a process

hss

operateAppRansomHashInfo

Removing a server associated with a ransomware prevention policy

hss

deleteAppRansomHostInfo

Associating a server with a ransomware prevention policy

hss

addAppRansomHostInfo

Relearning a ransomware prevention policy on associated servers

hss

relearnAppRansomHostInfo