Pentera Filter And Create Incident

Sub-playbook to select specific entries from the Pentera action report and create incidents for each of the selected entries

Dependencies

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks

This playbook does not use any sub-playbooks.

Integrations

• Builtin

Scripts

• SetAndHandleEmpty
• PenteraOperationToIncident

Commands

• createNewIncident

Playbook Inputs

---

Name	Description	Default Value	Required
Filter password cracking	Filter all password cracking operation types	True	Required
Filter BlueKeep vulnerability	Filter all BlueKeep operation types	True	Required
Filter Minimum Severity	Filters actions according to given value.
Will not filter anything if got zero (0) as value.	0	Required
FullActionReport	Pentera Full Action Report is the summary of the given TaskName in a CSV format, that contains all the actions that Pentera performed during the task run.
The value will be provided from Pentera Run Scan and Create Incidents playbook.		Required
Filter MS17-010 vulnerability	Filter all MS17-010 operation types	True	Required
Filter network device default password usage	Filter all network device default password operation types	True	Required
Filter open shares	Filter all open shares operation types	True	Required

Playbook Outputs

---

There are no outputs for this playbook.