Pentera Run Scan and Create Incidents

This playbook will run a pentera task given the Pentera task name. It will generate the full action report that contains all the actions that Pentera made during the scan, and will create incidents according to the filters in the Pentera Filter and Create incidents playbook.

Pentera · 4 tasks · 1 input · 0 outputs

Details

ID	`Pentera Run Scan and Create Incidents`
From Version	5.0.0
Tasks	4

README

Dependencies

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks

Pentera Run Scan
Pentera Filter And Create Incident

Integrations

This playbook does not use any integrations.

Scripts

This playbook does not use any scripts.

Commands

This playbook does not use any commands.

Playbook Inputs

Name	Description	Default Value	Required
PenteraTaskName	The name of the Pentera task to run.		Required

Playbook Outputs

There are no outputs for this playbook.

Inputs

PenteraTaskName — The name of the Pentera task to run.

Flowchart

Source

playbook-Pentera_Run_Scan_and_Create_Incidents.yml

Download History Raw

id: Pentera Run Scan and Create Incidents
version: -1
name: Pentera Run Scan and Create Incidents
description: This playbook will run a pentera task given the Pentera task name. It
  will generate the full action report that contains all the actions that Pentera
  made during the scan, and will create incidents according to the filters in the
  Pentera Filter and Create incidents playbook.
starttaskid: '0'
tasks:
  '0':
    id: '0'
    taskid: 0f3c125c-0340-40ad-8ae1-b487469ec90d
    type: start
    task:
      id: 0f3c125c-0340-40ad-8ae1-b487469ec90d
      version: -1
      name: ''
      iscommand: false
      brand: ''
      description: ''
    nexttasks:
      '#none#':
      - '2'
    separatecontext: false
    view: "{\n  \"position\": {\n    \"x\": 50,\n    \"y\": 50\n  }\n}"
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
  '2':
    id: '2'
    taskid: b6928fad-433c-4c03-80cd-59a4452c75df
    type: playbook
    task:
      id: b6928fad-433c-4c03-80cd-59a4452c75df
      version: -1
      name: Pentera Run Scan
      playbookName: Pentera Run Scan
      type: playbook
      iscommand: false
      brand: ''
      description: ''
    nexttasks:
      '#none#':
      - '3'
    scriptarguments:
      PenteraTaskName:
        simple: ${inputs.PenteraTaskName}
    separatecontext: false
    loop:
      iscommand: false
      exitCondition: ''
      wait: 1
      max: 0
    view: "{\n  \"position\": {\n    \"x\": 50,\n    \"y\": 195\n  }\n}"
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
  '3':
    id: '3'
    taskid: 350ca2f1-abec-4bf2-884a-61b7c021777d
    type: playbook
    task:
      id: 350ca2f1-abec-4bf2-884a-61b7c021777d
      version: -1
      name: Pentera Filter And Create Incident
      description: Sub-playbook to select specific entries from the Pentera action
        report and create incidents for each of the selected entries
      playbookName: Pentera Filter And Create Incident
      type: playbook
      iscommand: false
      brand: ''
    nexttasks:
      '#none#':
      - '4'
    scriptarguments:
      Filter BlueKeep vulnerability:
        simple: 'True'
      Filter MS17-010 vulnerability:
        simple: 'True'
      Filter Minimum Severity:
        simple: '0'
      Filter network device default password usage:
        simple: 'True'
      'Filter open shares ':
        simple: 'True'
      Filter password cracking:
        simple: 'True'
      FullActionReport:
        complex:
          root: Pentera
          accessor: TaskRun.FullActionReport
    separatecontext: false
    loop:
      iscommand: false
      exitCondition: ''
      wait: 1
      max: 100
    view: "{\n  \"position\": {\n    \"x\": 50,\n    \"y\": 370\n  }\n}"
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
  '4':
    id: '4'
    taskid: db084004-95a6-4fc7-8db9-bf4b2f3dbe94
    type: title
    task:
      id: db084004-95a6-4fc7-8db9-bf4b2f3dbe94
      version: -1
      name: Done
      type: title
      iscommand: false
      brand: ''
      description: ''
    separatecontext: false
    view: "{\n  \"position\": {\n    \"x\": 50,\n    \"y\": 545\n  }\n}"
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
view: "{\n  \"linkLabelsPosition\": {},\n  \"paper\": {\n    \"dimensions\": {\n \
  \     \"height\": 560,\n      \"width\": 380,\n      \"x\": 50,\n      \"y\": 50\n\
  \    }\n  }\n}"
inputs:
- key: PenteraTaskName
  value: {}
  required: true
  description: The name of the Pentera task to run.
  playbookInputQuery:
outputs: []
sourceplaybookid: Pentera Run Scan - Test
fromversion: 5.0.0
tests:
- Pentera Run Scan and Create Incidents - Test