Pentera Filter And Create Incident

Sub-playbook to select specific entries from the Pentera action report and create incidents for each of the selected entries

Pentera · 22 tasks · 7 inputs · 0 outputs

Inputs

  • Filter password cracking — Filter all password cracking operation types
  • Filter BlueKeep vulnerability — Filter all BlueKeep operation types
  • Filter Minimum Severity — Filters actions according to given value. Will not filter anything if got zero (0) as value.
  • FullActionReport — Pentera Full Action Report is the summary of the given TaskName in a CSV format, that contains all the actions that Pentera performed during the task run. The value will be provided from Pentera Run Scan and Create Incidents playbook.
  • Filter MS17-010 vulnerability — Filter all MS17-010 operation types
  • Filter network device default password usage — Filter all network device default password operation types
  • Filter open shares — Filter all open shares operation types

Commands used

createNewIncident

Flowchart

yes yes yes yes yes yes yes Start Start FilterBySeverity - SetAndHandleEmpty FilterBySeverity SetAndHandleEmpty Is Minimum Severity Greater Than Zero Is Minimum Severity Great... Select all the entries - SetAndHandleEmpty Select all the entries SetAndHandleEmpty Filter by Operation Type and a successful Status Filter by Operation Type ... Are we filtering BlueKeep Are we filtering BlueKeep Incidents Incidents Are filtering we MS17-010 vulnerability Are filtering we MS17-010... FilterMS17010OperationTypes - SetAndHandleEmpty FilterMS17010OperationTypes SetAndHandleEmpty Are we filtering password cracking Are we filtering password... FilterPasswordCrackingOperationTypes - SetAndHandleEmpty FilterPasswordCrackingOpe... SetAndHandleEmpty Are we filtering network device default password usage Are we filtering network ... FilterDefaultPasswordsOperationTypes - SetAndHandleEmpty FilterDefaultPasswordsOpe... SetAndHandleEmpty Filter by "success" status Filter by "success" status FilterSuccessStatus - SetAndHandleEmpty FilterSuccessStatus SetAndHandleEmpty Filter by severity Filter by severity Create Pentera Incidents - createNewIncident Create Pentera Incidents createNewIncident FilterBlueKeepOperationTypes - SetAndHandleEmpty FilterBlueKeepOperationTypes SetAndHandleEmpty Is Pentera Operations not empty? Is Pentera Operations not... FilterOpenShares - SetAndHandleEmpty FilterOpenShares SetAndHandleEmpty Are we filtering open shares Are we filtering open shares Pentera Group Incidents - PenteraOperationToIncident Pentera Group Incidents PenteraOperationToIncident