search

fiware-cybercaptor / cybercaptor-data-extraction

Python scripts allowing to prepare the inputs for CyberCAPTOR
GNU General Public License v3.0
1 stars 3 forks source link

Mulval rules #6

Open Fanda36 opened 6 years ago

Fanda36 commented 6 years ago

Hi, I used argument "--mulval-output-file" for Mulval output. Everything works fine, I get Mulval output. But there are Mulval rules which are not in basic knowledge base (so Mulval can not find attack path). Could you share your custom rules in Mulval please?

There are few lines of output file with custom Mulval rules:

hasIP('linux-user-2','192.168.1.112').
isInVlan('192.168.1.112','user-lan').
hostAllowAccessToAllIP('linux-user-2').
vlanToVlan('dmz','user-lan',_,_).

Thank you.