Skip to content

sjtuxiaoxue/QRadar-ruleset

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

8 Commits
 
 
 
 
 
 
 
 

Repository files navigation

QRadar-ruleset

QRadar Export the rule set for printing

On QRadar system run:

/opt/qradar/bin/contentManagement.pl --action export -c customrule -i all

copy the resulting file to a workstation and unpack the file:

tar -xvzf [filename.gz]

run the Python script:

python3 QRadar-ruleset.py [filename.xml] > rules.txt

python3 QRadar-rule2html.py [filename.xml] > rules.html

Import the rules.txt file into a spreadsheet or browser, field delimiter is "#" format and print as needed.

About

QRadar Export the rule set for printing

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • Python 100.0%