> For the complete documentation index, see [llms.txt](https://docs.enginsight.com/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.enginsight.com/docs/manual/english/platform-usage/hosts/advanced-persistent-threats/whitelist.md). # Whitelist The Advanced Persistent Threat (APT) whitelist allows you to classify specific files and directories as trusted, preventing them from being incorrectly detected as APTs. *** Navigate to **Hosts** → **Advanced Persistent Threats** → **Whitelist** to view a list of all whitelist entries. If you have not created any whitelist entries yet, this view is empty.

The [whitelist overview](#whitelist-overview) provides information such as: * which hosts and rules a whitelist entry applies to. * which files and directories a whitelist entry applies to. * whether a whitelist entry is enabled. You can also [add new whitelist entries](#add-whitelist-entry). *** ## Navigation Click the **Text Search** field above the list and enter a search term of your choice to find specific list items more quickly. Click the **Refresh** icon above the list to update all list items. Scroll down the list or adjust the number of results shown per page ![](https://2423388680-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FV7OrHgKXA0t1jankQBYf%2Fuploads%2FfjKACCt2SKXcFd3S7Xb5%2FEnginsight-EN-Results%20per%20Page.jpg?alt=media\&token=e1650160-7a41-4965-aaca-6975db758dbe) to view additional entries. Use the page navigation ![](https://content.gitbook.com/content/V7OrHgKXA0t1jankQBYf/blobs/wnxVw06QGoSsYjhwMJRF/Enginsight-Seitennavigation-2.jpg) to switch between pages. ### Filtering the List Click the **Filter** icon above the list to filter the list by predefined parameters.

Available Filters

Parameter	Type	Beschreibung
Active	Boolean	Filter by whether a whitelist entry is enabled or not. The following values are available: True: The whitelist entry is enabled. False: The whitelist entry is disabled.
File Path	String	Filter by a specific file path for which a whitelist entry was created, or exclude it from the results. All available file paths are shown.
Host	String	Filter by a specific host that is assigned to a whitelist entry, or exclude it from the results. All available hosts are shown.
Host Tag	String	Filter by a specific tag for a host group assigned to a whitelist entry, or exclude it from the results. All available tags are shown.

### Sorting List Items Click the **Sort** icon next to a column name in the table header to sort by that column in ascending or descending order . Click the sort icon above the list to adjust the priority of the applied sorting. A menu opens that shows all columns by which the list is currently sorted. Drag and drop the shown items to change the sorting priority. ### Further Actions for List Items Select the checkbox next to a list item to select the respective item. Alternatively, select the checkbox in the table header to select all list items. The number of selected list items is now shown next to the search field. The **Actions** menu also appears in the upper-right corner. Click it to expand the respective submenu. The following actions are available:

Action	Description
Delete	Delete all selected whitelist entries. Confirm the prompt by clicking Delete. Please note: Deleted settings cannot be restored.
Enable	Enable all selected, disabled whitelist entries.
Disable	Disable all selected, enabled whitelist entries.

*** ## Whitelist Entries: Overview The whitelist overview is structured as a table.

The following information is shown:

Column	Description
Name	Shows the custom name of the whitelist entry and an additional description, if provided. The date and time of creation and last edit are also shown. Click the name of a whitelist entry to navigate to the respective edit view. Here you can adjust configured settings and delete the whitelist entry.
Assigned References	Shows the names of the hosts to which the respective whitelist entry applies or which are excluded from it, as well as the tags that refer to the corresponding host groups. Click the name of a host to navigate to the respective host detail view.
Assigned References	Shows the name of the rule to which the respective whitelist entry applies. If the whitelist entry applies to all rules, this is indicated accordingly.
Filepaths	Shows the file paths to which the respective whitelist entry applies or which are excluded from it.
Enabled	Shows whether the respective whitelist entry is enabled or not. If the whitelist entry is enabled, this is indicated by a green check icon . Inactive whitelist entries are indicated by a red circle icon .

*** ## Adding a Whitelist Entry Click **Add Whitelist** in the upper-right corner to [create a new whitelist entry](/docs/manual/english/platform-usage/hosts/advanced-persistent-threats/whitelist/add-whitelist-entry.md). *** ## Whitelist: Edit-View Click the name of a whitelist entry to navigate to the respective edit view. Here you can adjust [configured settings](/docs/manual/english/platform-usage/hosts/advanced-persistent-threats/whitelist/add-whitelist-entry.md#general-settings) and delete the whitelist entry. The following actions are available:

Option	Description
Save Changes	Click Save Changes after adjusting any settings. Please note: Unsaved changes cannot be recovered.
Back	Click Back to return to the list overview.
Remove	Click Remove, then confirm the prompt that appears to delete the object that you are editing. Please note: Deleted objects cannot be recovered.

***