1. Managing Categories

In this page you will get the details about how to handle and manage categories.

1.1. Category management user's rights.

Only one unique Finder's user account can manage categories. Per default the Admin account is granted to manage Categories.

Admin can, using Tools / Manage Users menu, delegate the category management function to another Finder named account with the information level set to "Personal", using the Set Category Editor button.

1.2. Connecting Engine with Category Editor user's rights

Launch NEXThink Finder, and log in with the category editor user.

A Category section is available for managing the configuration.

The Engine contains System categories which are neither configurable nor editable:

• Account type shows the type of windows user account. The possible keywords are local, domain and system.

1.3. Creating a Category

Using a right click over the Categories section or a selected folder, the user can create a new category item using a contextual menu. A Category is assigned to an object family.

Note: categories can also be created directly within the object edition dialog, see Tagging Objects section.

1.4. Naming a Category

A new Untitled Category category is created.

• Naming a Category item should be done carefully as this new object property will be then used in investigations and widgets. Renaming or deleting, later on, a given Category will cause all investigations and widgets using old name useless.

To set a name for a Category , as for Investigation names, either click on the Untitled Category name and enter a new name or in category tree using a right click over the created category, use the rename function.

A short description for the category can be set.

1.5. Category privilege Information level

A privilege for the information level is available for each category.

This will allow users having same or above privilege level to see and use a given category. For example, if a category is created with an Information level set to "personal", only Finder user accounts having "personal" level will be able to see and use this category.

1.6. Adding Keywords

To manage keywords for a category the keyword panel can be found in the Category management screen.

A single click on the + icon will create a new keyword for the edited Category.

Note: keywords can also be created directly within the object edition dialog, see Tagging Objects section for more information.

1.7. Auto-tagging rules

Once created, the Category editing right panel allows the user to set Auto-tagging rules for the selected keyword.

Select Click here to add a new condition for new auto-tagging rule.

Select each other Keyword to add auto-tagging rules.

Note: with the operator matches, the character "*" stands for any number or arbitrary characters.

1.8. Auto-tagging ordering

If more than one keyword is auto-tagged, tagging operation will be executed keyword by keyword. Keyword display is presented following alphabetic order. If complex consecutive rules have to be applied for a given category, the user is allowed to review and tune the tagging process order using the "Set auto-tagging order.. " button.

1.9. Default auto-tagging rule

To set a default keyword, you can add it as the last one in the auto-tagging order and matching any condition as tagging rule.

Click Save to only save the category configuration. Apply the configuration to the objects with Save and close or Close if a previous Save has already been done. Displaying results for a given category can be obtained after the close or by using contextual menu " Display..." on the category tree.

2. Example

2.1. Using LDAP Organisation Units for Auto-tagging

• Step 1 List Distinguished Name of Active Directory users.

  • 

• Step 2 Discover the OU structure and design the category.

  • 

  • In this example, we will create a category Department with the keywords IT, Services, QA and R&D and matching the second OU level of the full distinguished name. For the other users, the keyword RoU (Rest of Users) will be used.

• Step 3 Create the category "department" and set each keyword with the auto-tagging rule.

  • For the IT department:

    • 

    For the QA department:

    • 

    For the R&D department:

    • 

    For the Services department:

    • 

    For the rest of users (last keyword in the auto-tagging order) :

    • 

    Note: use one part of the DN to differentiate local or system users than domain users.

• Step 4 Save and close to apply the configuration and see the result

  • 

• Step 5 Use the category in an Investigation

  • For example, retrieve the applications used by the IT department

    •