Security event processing method, device and equipment, and storage medium

Abstract

The invention discloses a security event processing method, device and equipment and a storage medium, and the method comprises the steps: obtaining components and a component implementation sequencewhich are set by the outside for each security event, and obtaining a component script corresponding to each security event; wherein different components correspond to different functions; generatingan executable script file corresponding to each security event based on each component script; and receiving different security events from different systems, and executing corresponding script filesunder the triggering of the received different security events, so that corresponding security operations are realized. Therefore, the corresponding security operation can be automatically realized byexecuting the script file only by executing the generation of the script files of the different security events once, so that the security event processing operation is greatly simplified, and the efficient processing of a large number of security events is facilitated.

Description

technical field [0001] The present invention relates to the technical field of IDR, and more specifically, to a security event processing method, device, equipment and storage medium. Background technique [0002] When implementing security event processing, security personnel are usually required to manually analyze security events and identify risks in the prior art. However, operations such as manual analysis, risk identification, and blocking security events are cumbersome to operate. When there are tens of thousands of security incidents, security personnel may not have time to deal with these security incidents. Contents of the invention [0003] The object of the present invention is to provide a security event processing method, device, equipment and storage medium, which can greatly simplify the operation of security event processing and facilitate efficient processing of a large number of security events. [0004] In order to achieve the above object, the presen...

AI Technical Summary

Problems solved by technology

[0002] When implementing security event processing, security personnel are usually required to manually analyze security events and identify risks in the prior art. However, operations such as manual analysis, risk identification, and blocking security events are cumbersome to operate. When there are tens of thousands of security incidents, security personnel may not have time to deal with these security incidents

Images