Zum Inhalt springen
NEUMarktplatz und trig8n Agent: Verkaufen Sie, was Sie bauen, und erhalten Sie Pläne und Änderungen, die getestet sind, bevor Sie sie sehen. Neuigkeiten ansehen

Bibliothek / Sicherheit & Compliance

Sicherheit & Compliance

Wöchentlicher Shodan-Scan meldet unerwartete offene Ports an TheHive

Jede Woche scannt es überwachte IPs mit Shodan, findet Dienste auf unerwarteten Ports und erstellt Alarme in TheHive.

Was sie bewirkt

# Weekly_Shodan_Query_Report_Accidentsno_function_node_ ## Overview Automated workflow: Weekly_Shodan_Query_Report_Accidentsno_function_node_. This workflow integrates 11 different services: itemLists, httpRequest, filter, markdown, stickyNote. It contains 19 nodes and follows best practices for error handling and security. ## Workflow Details - Total Nodes: 19 - Node Types: 11 - Error Handling: ✅ Implemented - Security: ✅ Hardened (no sensitive data) - Documentation: ✅ Complete ## Node Breakdown - Scan each IP: httpRequest - Get watched IPs & Ports: httpRequest - Split out services: itemLists - Unexpected port?: filter - Set data to post for each port: set - Convert to table: html - Convert to Markdown: markdown - For each IP: splitInBatches - Sticky Note: stickyNote - Sticky Note1: stickyNote - ... and 9 more nodes ## Usage Instructions 1. Configure Credentials: Set up all required API keys and credentials 2. Update Variables: Replace any placeholder values with actual data 3. Test Workflow: Run in test mode to verify functionality 4. Deploy: Activate the workflow for production use ## Security Notes - All sensitive data has been removed or replaced with placeholders - Error handling is implemented for reliability - Follow security best practices when configuring credentials ## Troubleshooting - Check error logs if workflow fails - Verify all credentials are properly configured - Ensure all required services are accessible

Die Schritte

  1. Scan each IP
  2. Get watched IPs & Ports
  3. Split out services
  4. Unexpected port?
  5. Set data to post for each port
  6. Convert to table
  7. Convert to Markdown
  8. For each IP
  9. Every Monday
  10. Create TheHive alert
  11. Error Handler
  12. Stopanderror 1
  13. Error Handler for 54b2b2bd
  14. Error Handler for f6b194a7

Insgesamt 29 Schritte.

Ähnliche Automatisierungen