/
Find and evaluate - search pattern
Find and evaluate - search pattern
1. introduction
In the basic analysis, all data and accesses from the applications - if desired also from the designs of the applications - have already been read and are now searchable.
The search and evaluation is configured by so-called search patterns
2. search patterns and search pattern sets
In simple terms, search patterns are searches for individual pieces of information. In order to obtain an evaluation of an application, one usually needs many individual pieces of information - these are combined by search pattern sets and thus lead to an evaluation.
Example:
search me all applications accessed in the last 3 months
only applications with write access for at least 10 people are of interest
if more than two masks present, then rate higher
if activated background agents are present also rate high