Check out a more recent version of QRadar Rule Manager -> https://github.com/thonau712/QRadar-Rule-Manager-Enhanced
Python program that allows you to import / export rules directly from/to QRadar, also supports basic github integration which hopefully we'll be able to make into some form of detection-as-code.
How to install?
- Either download the compiled release under "Releases" page.
- Run the code directly. Requires the following:
pip3 install pyqt6
pip3 install pyqtdarktheme
pip3 install requests
pip3 install PyGithub
VIDEO:
If you are more interested in my work or would like to contact me: https://detections.xyz/
https://www.udemy.com/course/modern-qradar-administration/?referralCode=FB77AE79C0F4FCEEA2D1