naren-jayram/RT-Incident-Reports-to-Incident-Linking

Stars
2
Language
Perl
Created almost 6 years ago
Updated almost 6 years ago

naren-jayram/RT-Incident-Reports-to-Incident-Linking

naren-jayram

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Automating the process of linking old and future Incident Reports(IR) to appropriate Incident in Request Tracker for Incident Response (RTIR) based on the analyst's incident condition criterion. Two scripts (old_ir_incident.pl and ir2incident_linking.pl) cooperatively help achieve the objective.

Threat-Intel-Automation

Threat Intel Automation using Graylog and Critical-Stack-Intel

ble-fuzzer

Linux-Heap-Based-Type-Confusion-in-L2CAP

RequestTracker-Customfield-Value-Modification

To change the concerned custom field's custom field value in *Request Tracker for Incident Response (RTIR)* to the desired one

McAfee-IDS-PCAP-Exporter

Downloads the PCAP files associated with the IDS alerts from McAfee NSM in a given time frame.

Useful-Tools

Some basic common tools for making life some extent easy :)

Injection-McAfeeIDSAlerts-Graylog

Converts raw McAfee IDS alerts to Common event Format (CEF) compliant messages and finally injects into Graylog

PaloAlto

Basic Automation using PaloAlto UTM API

CiscoPrime-Rogue-AP-Detection

Automation of the process to detect rogue access points by identifying all the foreign access points (*AP that does not belongs to organization's wireless network Infrastructure*) that resides in a given network for more than 24 hours, followed by raising a JIRA ticket under a given project to the respective stakeholders

Binary-Security-Feature-Extractor

Wrapper built on top of checksec/winchecksec to pull the common security features associated with all the Linux /windows binaries in a given directory