Cisco Security Agent

Chapter 11. Application Behavior Analysis

This chapter covers the following topics:

• Understanding application behavior investigation components

• Configuring application behavior investigation

• Using application behavior investigation on the remote agent

• Analyzing log data

• Viewing behavior reports

• Exporting the behavior analysis report data

• Analyzing UNIX application behavior

• Creating behavior analysis rule modules

When attempting to write policies to control and secure your application environment, you must have a detailed understanding of those applications and their usage. The information required includes the following:

• What applications are deployed

• Where the applications are deployed

• How the user should interact with the application

• How the applications ...