search

sophos / Sophos-Central-SIEM-Integration

Simple integration script for 3rd party systems such as SIEMs. Offers command line, file or syslog output in CEF, JSON or key-value pair formats.
121 stars 70 forks source link

Severity Map #58

Open cbxsec1 opened 3 years ago

cbxsec1 commented 3 years ago

Is there a way to modify the siem.py script to only show High and very high events in the SEVERITY_MAP?

SEVERITY_MAP = {"none": 0, "low": 1, "medium": 5, "high": 8, "very_high": 10}