Comments on: tissynbe.py — Insert Nessus results into MySQL, output as a CSV http://www.tssci-security.com/archives/2008/05/23/tissynbepy-insert-nessus-results-into-mysql-output-as-a-csv/ top secret/secure computing information Fri, 21 Nov 2008 19:34:10 +0000 http://wordpress.org/?v=2.2.3 By: Marcin http://www.tssci-security.com/archives/2008/05/23/tissynbepy-insert-nessus-results-into-mysql-output-as-a-csv/#comment-6869 Marcin Sun, 25 May 2008 15:49:15 +0000 http://www.tssci-security.com/archives/2008/05/23/tissynbepy-insert-nessus-results-into-mysql-output-as-a-csv/#comment-6869 @ Garrett: In one use, we correlated anti-virus data against a known list of hostnames. We identified Windows hosts without AV, out of date signatures, new hostnames, etc. One of our team members in a previous life was a database administrator, so his SQL skills were great at coming up with some interesting reports, and also provided some error-checking against my sed/awk/bash skills. @ Garrett: In one use, we correlated anti-virus data against a known list of hostnames. We identified Windows hosts without AV, out of date signatures, new hostnames, etc. One of our team members in a previous life was a database administrator, so his SQL skills were great at coming up with some interesting reports, and also provided some error-checking against my sed/awk/bash skills.

]]> By: Garrett Gee http://www.tssci-security.com/archives/2008/05/23/tissynbepy-insert-nessus-results-into-mysql-output-as-a-csv/#comment-6797 Garrett Gee Fri, 23 May 2008 22:09:16 +0000 http://www.tssci-security.com/archives/2008/05/23/tissynbepy-insert-nessus-results-into-mysql-output-as-a-csv/#comment-6797 @Marcin Thats a good reason to have the mysql requirement. What are you doing with the data once inside the db? Any plans on correlating the data with other feeds? @Marcin Thats a good reason to have the mysql requirement. What are you doing with the data once inside the db? Any plans on correlating the data with other feeds?

]]> By: Marcin http://www.tssci-security.com/archives/2008/05/23/tissynbepy-insert-nessus-results-into-mysql-output-as-a-csv/#comment-6795 Marcin Fri, 23 May 2008 21:27:34 +0000 http://www.tssci-security.com/archives/2008/05/23/tissynbepy-insert-nessus-results-into-mysql-output-as-a-csv/#comment-6795 @ Garrett: Yes! I saw your stuff before too though it didn't fit the bill for what I needed at the time. (does it ever? haha). I needed the MySQL database for other reasons as well, since it was being accessed by multiple users at the time. @ Garrett: Yes! I saw your stuff before too though it didn’t fit the bill for what I needed at the time. (does it ever? haha). I needed the MySQL database for other reasons as well, since it was being accessed by multiple users at the time.

]]> By: Garrett Gee http://www.tssci-security.com/archives/2008/05/23/tissynbepy-insert-nessus-results-into-mysql-output-as-a-csv/#comment-6793 Garrett Gee Fri, 23 May 2008 21:08:30 +0000 http://www.tssci-security.com/archives/2008/05/23/tissynbepy-insert-nessus-results-into-mysql-output-as-a-csv/#comment-6793 I wrote something very similar a while back to fit my needs too. http://garrettgee.com/2006/12/17/nessus-tools/ and http://garrettgee.com/2007/10/21/nessus-tools-html-reports/ One major difference is that I use a localized database via sqlite. Having the requirement of mysql installed/running doesn't make for a lightweight portable system, which was a requirement for my environment. I wrote something very similar a while back to fit my needs too.

http://garrettgee.com/2006/12/17/nessus-tools/ and http://garrettgee.com/2007/10/21/nessus-tools-html-reports/

One major difference is that I use a localized database via sqlite. Having the requirement of mysql installed/running doesn’t make for a lightweight portable system, which was a requirement for my environment.

]]>