Cyberdefense/VulnWhisperer
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

cvss mapping moved to vulnwhisperer

Browse Source
This commit is contained in:
pemontto
2019-04-15 22:02:33 +10:00
parent 982d51a465
commit ca5500add4
3 changed files with 0 additions and 91 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
resources/elk6/pipeline/2000_qualys_web_scans.conf
View File

@ -49,32 +49,6 @@ filter {
convert => { "total_times_detected" => "integer"}
}
if [cvss] == 0 {
mutate {
add_field => { "cvss_severity" => "info" }
}
}
if [cvss] > 0 and [cvss] < 3 {
mutate {
add_field => { "cvss_severity" => "low" }
}
}
if [cvss] >= 3 and [cvss] < 6 {
mutate {
add_field => { "cvss_severity" => "medium" }
}
}
if [cvss] >=6 and [cvss] < 9 {
mutate {
add_field => { "cvss_severity" => "high" }
}
}
if [cvss] >= 9 {
mutate {
add_field => { "cvss_severity" => "critical" }
}
}
if [first_time_detected] {
date {
match => [ "first_time_detected", "dd MMM yyyy HH:mma 'GMT'ZZ", "dd MMM yyyy HH:mma 'GMT'" ]