A Converter for McAfee SIEM Rule Export Files to Markdown Documents
Go to file
2018-03-22 15:41:33 +01:00
demo added demo.xml and Markdown output 2018-03-22 15:41:33 +01:00
esm2markdown.ini updated ini 2018-03-19 21:29:15 +01:00
esm2markdown.py fixed bug in diagram generation, added blue boxes for reference match types 2018-03-22 11:14:00 +01:00
GPL.txt added copyright information 2018-03-17 17:13:14 +01:00
README.md added dependencied to README 2018-03-21 23:07:53 +01:00

esm2markdown

This python script is intended to be used to automatically generate use case / correlation rule documentation in Markdown format for the McAfee Enterprise Sceurity Manager (ESM). It accepts a XML file that has been exported from the correlation rule editor of the ESM, converts its contents to Markdown format and writes it into a new file. If you need any other format, you might want to use pandoc to convert to e.g. pdf, docx or HTML.

Requirements

This tool requires the following:

  • Python 3
  • lxml
  • networkx
  • pydot

On Debian you can install the dependencies with "sudo apt-get install python3-lxml python3-networkxi python3-pydot"

Usage

python esm2markdown <rule xml file> <markdown output file>

Example

python esm2markdown RuleExport_2018_03_01_12_36_37.xml documentation.mk