PicusNG

Picus - The Complete Security Control Validation NG Platform.

Category

Network Security

Pack

PicusNGAutomation

Configuration parameters

• picus_server — Picus Manager URL (required)
• insecure — Trust any certificate (not secure)
• proxy — Use system proxy settings
• picus_apikey — Picus Refresh Token (required)

Commands (16)

• picus-create-simulation — This command creates and runs a simulation as requested; scheduled or instant. You can create a simulation by giving your simulation a name and adding the template ID, agent ID.
• picus-filter-insecure-attacks — Filter insecure attacks on playbook. (This command is only used on playbook).
• picus-get-agent-detail — This command returns agent name, status, agent type, platform and also mitigation devices and attack modules using the agent ID.
• picus-get-agent-list — This command returns the simulation agent list with agent name, id, status, agent type and platform information as in Picus platform > Agents.
• picus-get-integration-agent-list — This command returns the agent name, id, status, agent installation information and the token expiration information.
• picus-get-latest-simulation-result — This command returns detailed information about simulation results including Prevention and Detection result details for the latest simulation run.
• picus-get-mitigation-devices — This command returns mitigation device information as obtained under Picus platform > Mitigation > Vendor Based Mitigations. Vendor based mitigation devices can be fetched using this command.
• picus-get-signature-list — This command returns action based signature suggestions.
• picus-get-simulation-actions — This command returns simulation result based on action list using threat ID, simulation ID and simulation run ID.
• picus-get-simulation-detail — This command returns the information about a specific simulation.
• picus-get-simulation-list — This command returns the list of you latest simulation result overview as in Picus Platform > Simulations tab. Latest simulation run results are included.
• picus-get-simulation-result — This command returns detailed information about simulation results including Prevention and Detection result details for a specific simulation run with run id.
• picus-get-simulation-threats — This command returns simulation result based on threats. Threat result includes threat id and name, prevention result and action count.
• picus-get-template-list — This command returns template list that contains template name, id, description, content type, category as in Picus Platform> Threat Templates.
• picus-set-paramPB — Set parameter on playbook. (This command is only used on playbook).
• picus-simulate-now — This command runs the existing simulation using the Simulation ID.