qrz.is/content/post/2018-04-29-correlation-rule-documentation-generator-for-mcafee-siem.md

18 lines
832 B
Markdown
Raw Normal View History

2021-07-13 19:53:07 -04:00
---
title: Correlation Rule Documentation Generator for McAfee SIEM
type: post
2021-07-13 19:53:07 -04:00
author: micha
date: 2018-04-29T13:09:57+00:00
url: /correlation-rule-documentation-generator-for-mcafee-siem/
tags:
- Software
- SIEM
- Python
2021-07-13 19:53:07 -04:00
---
Since we are required to document all custom correlation rules inside our SIEM (McAfee Enterprise Security Manager) for our customers, I wrote a Python script that converts XML rule exports to Markdown. Afterwards its easy to convert teh resulting file e.g. to PDF, DOCX, HTML or even variuous wiki-formats with e.g. Pandoc. This way it's possible to generate a PDF documentation of all rules with just a few clicks/commands.
2021-07-13 19:53:07 -04:00
![image](/img/esm2markdown.png)
2021-07-13 19:53:07 -04:00
2022-07-10 17:37:25 -04:00
On the long shot that this is useful for you, you can find the script on [codeberg.org/mclemens](https://codeberg.org/mclemens/esm2markdown).