You might want to define a macro called @@crit_procs@@ that serves as a list of the critical process names on the system. Such a macro might have a long list of process names. The value might be something such as lsass.exe and svchost.exe and smss.exe and csrss.exe and winmgmt.exe. When you want to refer to any of these processes, you simply specify the @@crit_procs@@ macro. Likewise, to update the list of critical process names, you add a new process name to the list using the macro editor instead of updating the list at each location where macro is used. In this instance, each of the processes is synonymous with the meaning critical processes.
Macros as synonym lists - Documentation for BMC AMI Command Center for Security 5.9
|