Add ACS Rich Policy Report utility #122
Open
+476
−0
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Description
This PR adds a new utility script for generating enriched CSV reports of ACS policies with human-readable MITRE ATT&CK information.
What it does
Why it's valuable
Complements existing
export-all-policiestool:export-all-policies: JSON format for policy backup/re-importacs-rich-policy-report: CSV format for security analysis and reportingTarget audience: Security analysts, auditors, compliance teams who need to:
Example Output
The existing JSON export contains MITRE IDs only:
This tool enriches with human-readable information:
Testing
Tested against ACS environment with 87 policies, successfully exported 34 policies with MITRE ATT&CK data.