{"id":26459989,"url":"https://github.com/zoldax/qradaroffensetools","last_synced_at":"2026-05-20T10:46:23.094Z","repository":{"id":250121801,"uuid":"832720099","full_name":"zoldax/qradarOffenseTools","owner":"zoldax","description":"QRadar Offense Tools (Viewer)","archived":false,"fork":false,"pushed_at":"2024-07-25T11:39:43.000Z","size":16,"stargazers_count":1,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2024-07-26T10:21:05.106Z","etag":null,"topics":["cybersecurity","cybersecurity-tools","offense","qradar","siem","soc"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/zoldax.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2024-07-23T15:29:43.000Z","updated_at":"2024-07-25T11:40:56.000Z","dependencies_parsed_at":"2024-07-25T10:16:34.794Z","dependency_job_id":null,"html_url":"https://github.com/zoldax/qradarOffenseTools","commit_stats":null,"previous_names":["zoldax/qradaroffensetools"],"tags_count":1,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/zoldax%2FqradarOffenseTools","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/zoldax%2FqradarOffenseTools/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/zoldax%2FqradarOffenseTools/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/zoldax%2FqradarOffenseTools/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/zoldax","download_url":"https://codeload.github.com/zoldax/qradarOffenseTools/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":244339409,"owners_count":20437243,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["cybersecurity","cybersecurity-tools","offense","qradar","siem","soc"],"created_at":"2025-03-19T02:22:22.915Z","updated_at":"2026-05-20T10:46:18.072Z","avatar_url":"https://github.com/zoldax.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"# 🛠️ QRadar Offense Tools\n\nThis repository contains `qradarOffenseTools.py`, a Python script for fetching and displaying QRadar offenses. It provides options to output the data in CSV or JSON format and also allows users to display QRadar system information.\n\n[![License](https://img.shields.io/github/license/zoldax/qradarOffenseTools?color=44CC11)](LICENSE)  [![Commit](https://img.shields.io/github/commit-activity/t/zoldax/qradarOffenseTools)](https://github.com/zoldax/qradarOffenseTools/commits/)  [![Views](https://hits.sh/github.com/zoldax/qradarOffenseTools.svg)](https://hits.sh/github.com/zoldax/qradarOffenseTools/) [![Last commit](https://img.shields.io/github/last-commit/zoldax/qradarOffenseTools/main)](https://github.com/zoldax/qradarOffenseTools/commits/main)\n\n## 📖 Description\n`qradarOffenseTools.py` is a command-line tool designed to interact with the QRadar API to retrieve and display offense data. The tool can output the data in both CSV and JSON formats for further analysis or reporting. Additionally, it can display QRadar system information.\n\n## 🛠️ Usage\nThe script can be executed from the command line with various arguments to control its behavior.\n\n### 1. Display QRadar Offenses\n```python\npython qradarOffenseTools.py --offense\n```\n\n### 2. Exporting Offenses to CSV\n```python\npython qradarOffenseTools.py --offense --format csv --output offenses.csv\n```\n\n### 3. Exporting Offenses to JSON\n```python\npython qradarOffenseTools.py --offense --format json --output offenses.json\n```\n\n### 4. Display QRadar System Information\n```python\npython qradarOffenseTools.py --version\n```\n\n## 📦 Requirements\n- Python 3.6 or later\n- Required Python packages:\n  - argparse\n  - csv\n  - json\n  - datetime\n  - qradarzoldaxlib (custom library for QRadar interactions)\n\n## 📥 Inputs\n- Command-line arguments to control script behavior\n- Configuration file: `config.txt`\n\n## 📤 Outputs\n- Console output for offenses and system information\n- CSV or JSON files for exported offenses\n\n## 🔑 Functionalities \u0026 Key Functions\n- `get_offenses()`: Fetches offenses from QRadar API.\n- `format_timestamp(epoch_millis)`: Converts epoch milliseconds to a human-readable datetime string.\n- `print_offenses(offenses)`: Prints QRadar offenses to the console.\n- `write_offenses_to_csv(offenses, filename)`: Writes offenses to a CSV file.\n- `write_offenses_to_json(offenses, filename)`: Writes offenses to a JSON file.\n- `print_qradar_version()`: Displays QRadar system information.\n\n## 🛠 Configuration: config.txt\nConfiguration parameters required by the script:\n1. `ip_QRadar`: IP address of the QRadar instance.\n2. `auth`: Authentication token for QRadar API access.\n3. `Version`: API version.\n4. `Accept`: Accept header value.\n5. `verify_ssl`: SSL verification (True/False).\n6. `ssl_cert_path`: Path to SSL certificate.\n7. `safety Parameter`: Additional safety parameters if any.\n\n## 🔐 SSL API Connection Support\nThe script supports SSL API connections by configuring `verify_ssl` and `ssl_cert_path` in the `config.txt` file.\n\n## 🚫 Error Handling\nThe script includes robust error handling mechanisms:\n- Network request failures\n- File I/O operations\n- Timestamp conversion errors\n\nErrors are logged using the configured logging level.\n\n## 📝 Notes\n- Ensure that the `config.txt` file is properly configured before running the script.\n- The custom library `qradarzoldaxlib` must be available in the Python path.\n\n## 📜 Disclaimer\nThis script is provided \"as-is\" without any warranties. Use it at your own risk. The authors and Abakus Sécurité are not responsible for any damage or data loss caused by the use of this script.\n\n## License\nLicensed under the Apache License, Version 2.0. See [LICENSE](http://www.apache.org/licenses/LICENSE-2.0) for more details.\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fzoldax%2Fqradaroffensetools","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fzoldax%2Fqradaroffensetools","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fzoldax%2Fqradaroffensetools/lists"}