Skip to content

Commit

Permalink
edit default qs
Browse files Browse the repository at this point in the history
  • Loading branch information
Lucas Faudman authored and Lucas Faudman committed Feb 6, 2024
1 parent 04c00a1 commit 6c983df
Show file tree
Hide file tree
Showing 2 changed files with 5 additions and 4 deletions.
7 changes: 4 additions & 3 deletions attackanalyzer.py
Original file line number Diff line number Diff line change
Expand Up @@ -34,15 +34,16 @@
"vuln_analysis": "Explain which vulnerabilities are being exploited. Include the exploit name(s), CVE number(s) and example code from ExploitDB, if possible. "
"First use search_exploitdb to find potential exploits, then use the get_exploitdb_exploit to get the code for the exploit that is being used in the attack.",


# Attack Classification Questions (Asked after AI context window has been updated with OSINT data and attack methods analysis)
"what_iocs": "What are the indicators of compromise (IOCs) for this attack?",
"mitre_attack": "How can this attack be classified using the MITRE ATT&CK framework?",
"goal_of_attack": "What is the goal of the attack?",
"would_attack_be_successful": "If the system is vulnerable, would the attack will be successful?",
"how_to_protect": "How can a system be protected from this attack?",
"what_iocs": "What are the indicators of compromise (IOCs) for this attack?",

"summary": "Summarize attack details, methods and goals to begin the report.",
"title": "Create an informative title for this attack based on the analysis that describes the attack methods, goals and source. Do not use any markdown.",
"title": ("Create an informative title for this attack based on the analysis that describes the attack delivery methods/exploits, payloads, and the OSINT collected on the attacker including location(s)."
" Do not use any markdown or wrap in quotes. Do not include words like 'honeypot' 'cyberattack' 'analysis' or similar in the title to avoid redundancy."),
}


Expand Down
2 changes: 1 addition & 1 deletion loganalyzers/logprocessor.py
Original file line number Diff line number Diff line change
Expand Up @@ -457,7 +457,7 @@ def print_attacks(self):
def print_exceptions(self):
print("\nExceptions:")
for n, (event, e) in enumerate(self.exceptions):
print(f"{n + 1}: {event['eventid']} - {e}\n{event}")
print(f"{n + 1}: {event.get('eventid')} - {e}\n{event}")

print(f"Total: {len(self.exceptions)}")

Expand Down

0 comments on commit 6c983df

Please sign in to comment.