Bibliothek / Sicherheit & Compliance
Sicherheit & Compliance
Wöchentlicher Shodan-Scan meldet unerwartete offene Ports an TheHive
Jede Woche scannt es überwachte IPs mit Shodan, findet Dienste auf unerwarteten Ports und erstellt Alarme in TheHive.
Was sie bewirkt
# Weekly_Shodan_Query_Report_Accidentsno_function_node_ ## Overview Automated workflow: Weekly_Shodan_Query_Report_Accidentsno_function_node_. This workflow integrates 11 different services: itemLists, httpRequest, filter, markdown, stickyNote. It contains 19 nodes and follows best practices for error handling and security. ## Workflow Details - Total Nodes: 19 - Node Types: 11 - Error Handling: ✅ Implemented - Security: ✅ Hardened (no sensitive data) - Documentation: ✅ Complete ## Node Breakdown - Scan each IP: httpRequest - Get watched IPs & Ports: httpRequest - Split out services: itemLists - Unexpected port?: filter - Set data to post for each port: set - Convert to table: html - Convert to Markdown: markdown - For each IP: splitInBatches - Sticky Note: stickyNote - Sticky Note1: stickyNote - ... and 9 more nodes ## Usage Instructions 1. Configure Credentials: Set up all required API keys and credentials 2. Update Variables: Replace any placeholder values with actual data 3. Test Workflow: Run in test mode to verify functionality 4. Deploy: Activate the workflow for production use ## Security Notes - All sensitive data has been removed or replaced with placeholders - Error handling is implemented for reliability - Follow security best practices when configuring credentials ## Troubleshooting - Check error logs if workflow fails - Verify all credentials are properly configured - Ensure all required services are accessible
Die Schritte
- Scan each IP
- Get watched IPs & Ports
- Split out services
- Unexpected port?
- Set data to post for each port
- Convert to table
- Convert to Markdown
- For each IP
- Every Monday
- Create TheHive alert
- Error Handler
- Stopanderror 1
- Error Handler for 54b2b2bd
- Error Handler for f6b194a7
Insgesamt 29 Schritte.
Ähnliche Automatisierungen
Sicherheit & ComplianceWöchentlicher Shodan-Scan meldet unerwartete Ports an TheHive10 SchritteSicherheit & ComplianceWöchentliche Shodan-Abfragen ausführen und exponierte Dienste an TheHive melden10 SchritteSicherheit & ComplianceFall in TheHive erstellen, aktualisieren und abrufen5 SchritteSicherheit & ComplianceTheHive-Alarme an SIGNL4 senden und auflösen8 Schritte