> For the complete documentation index, see [llms.txt](https://docs.enginsight.com/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.enginsight.com/docs/manual/english/platform-usage/hosts/advanced-persistent-threats/plans.md). # Plans Plans allow you to define when and how scans for Advanced Persistent Threats (APT) are performed. {% hint style="warning" %} **Please note**: Since APT scans generate high system load, we recommend that you run a full scan of all files on the hard drive no more than once per week. {% endhint %} *** Navigate to **Hosts** → **Advanced Persistent Threats** → **Plans** to show a list of all plans. If you have not added a plan yet, this view is empty.

The [plan overview](#plans-overview) provides information such as: * which hosts and, optionally, which file paths are scanned and when. * which rules are used as the basis for the scan. You can also start a scan directly and add a new [plan](/docs/manual/english/platform-usage/hosts/advanced-persistent-threats/plans/add-plan.md). *** ## Navigation Click the **Text Search** field above the list and enter a search term of your choice to find specific list items more quickly. Click the **Refresh** icon above the list to update all list items. Scroll down the list or adjust the number of results shown per page ![](https://2423388680-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FV7OrHgKXA0t1jankQBYf%2Fuploads%2FfjKACCt2SKXcFd3S7Xb5%2FEnginsight-EN-Results%20per%20Page.jpg?alt=media\&token=e1650160-7a41-4965-aaca-6975db758dbe) to view additional entries. Use the page navigation ![](https://content.gitbook.com/content/V7OrHgKXA0t1jankQBYf/blobs/wnxVw06QGoSsYjhwMJRF/Enginsight-Seitennavigation-2.jpg) to switch between pages. ### Filtering the List

Available Filters

Parameter	Type	Description
File Path	String	Filter by a specific file path that should be scanned on a host or exclude it from the results. All available file paths are shown.
Scheduled Execution	Boolean value	Filter by whether a plan includes a time interval for regularly running a scan or not. The following values are available: True: The plan includes a time interval. False: The plan does not include a time interval.
Host	String	Filter by a specific host on which a scan should be performed or exclude it from the results. All available hosts are shown.
Host Tag	String	Filter by a specific tag that is assigned to the hosts on which a scan should be performed or exclude these hosts from the results. All available tags are shown.
Rule	String	Filter by a specific rule that is assigned to a plan or exclude it from the results. All available rules are shown.
Rule Tag	String	Filter by a specific tag that is assigned to the rules that further define a scan or exclude these rules from the results. All available tags are shown.

### Sorting List Items Click the **Sort** icon next to a column name in the table header to sort by that column in ascending or descending order . Click the sort icon above the list to adjust the priority of the applied sorting. A menu opens that shows all columns by which the list is currently sorted. Drag and drop the shown items to change the sorting priority. ### Deleting List Items Select the checkbox next to a list item to select the corresponding item. Alternatively, select the checkbox in the table header to select all list items. The number of selected list entries is now displayed next to the search field. The **Delete** button also appears in the upper-right corner. Click it, then confirm the message that appears by clicking **Delete**. {% hint style="danger" %} **Please note:** Deleted items cannot be restored. {% endhint %} *** ## Plans: Overview The plan overview is structured as a table.

The following information is shown:

Column	Description
Plan	Shows the name of the plan as well as an additional description, if provided. The date and time of creation and last edit are also shown. Click the name of a plan to navigate to the respective edit view. Here you can adjust configured settings and delete the plan.
File Paths	Shows the file paths that should be scanned on the assigned hosts according to the plan.
Assigned Hosts	Shows the names of the hosts that should be scanned according to the plan or excluded from it, as well as the tags that refer to the corresponding host groups. Whether host names, tags, or both are shown depends on the settings of the assigned hosts that you configured for the respective plan. Click the name of a host to navigate to the respective host detail view.
Assigned Rule	Shows the names of the rules that are assigned to the plan or excluded from it, as well as the tags that refer to the corresponding rule groups. Whether rule names, tags, or both are shown depends on the settings of the assigned rules that you configured for the respective plan. Click the name of a rule to navigate to the respective edit view. Here you can adjust configured settings and delete the rule.
Actions	Shows the action that you can perform for the respective plan. Click Start Scan to directly run the scan defined by the respective plan. Confirm the prompt by clicking Start Scan.

*** ## Adding a Plan Click **Add Plan** in the upper-right corner to [create a new plan](/docs/manual/english/platform-usage/hosts/advanced-persistent-threats/plans/add-plan.md). *** ## Plan: Edit View Click the name of a plan to navigate to the respective edit view. Here you can adjust [configured settings](/docs/manual/english/platform-usage/hosts/advanced-persistent-threats/plans/add-plan.md#basic-settings) and delete the plan. The following actions are available:

Option	Description
Save Changes	Click Save Changes after adjusting any settings. Please note: Unsaved changes cannot be recovered.
Back	Click Back to return to the list overview.
Remove	Click Remove, then confirm the prompt that appears to delete the object that you are editing. Please note: Deleted objects cannot be recovered.

***