Re: complicated parsing from the file

I am not asking to write programs. I am asking for guidance from folks
who know what they are doing. I am not asking for code, but for advice
on how this could be done. Use this or that type of scenario or if it
is even doable.

Thanks.
AV
DJ Stunks wrote:
vanagas99@xxxxxxxxx wrote:
Here is the actual sample from the file I am trying to parse:

-----------------------
Physical Security
Severity : Cat II / Important
Status : Unknown
PDI ID : 1836

Finding Details
This vulnerability could not be checked by the program, it must be
checked manually.

Vulnerability Discussion
Category: II
Inadequate physical protection can undermine all other security
precautions utilized to protect the system. This can jeopardize the
confidentiality, availability, and integrity of the system. Physical
security of the individual machine is the first line protection of any
system.

Manual Fix Procedures
Ensure the computer equipment is located in a protected controlled
access area.

References and additional information
FSO Checklist: 3.1
CJCSM 6510.01, C-D.3



Administrator Documentation
Severity : Cat II / Important
Status : Unknown
PDI ID : 1788

Finding Details
This vulnerability could not be checked by the program, it must be
checked manually.

Vulnerability Discussion
Category: II
Using a privileged account to perform routine functions makes the
computer vulnerable to attack by any virus or Trojan Horse
inadvertently introduced during a session that has been granted full
privileges.

The rule of least privilege should always be enforced.

Manual Fix Procedures
Ensure administrative personnel have two accounts assigned, a standard
user account and an account with membership in the Administrators
group. Personnel should be instructed to use the less privileged
account for day-to-day use.

Each System Administrator will have a unique userid dedicated for
administering the system.
Each System Administrator will have a separate account for normal user
tasks.
The built-in Administrator account will not used to administer the
system.
Administrators will be properly trained.
The IAO will maintain a list of users belonging to the Administrators
group.

References and additional information
FSO Checklist: 3.2
DODI 8200.2, E3.4.7
CJCSM 6510.01, A-A.3
---------------
I need to be able to put everyting after the ":" in Severity, Status,
PDI DI, and everyting (multiple lines in some cases) after "Finding
Details", "Vulnerability Discussion", "Manual Fix Procedures" and
"References and additional information" in CSV format, so I can import
it to excel.

Please advice. Thanks in advance.

Thanks,
AV

multiposting (from clpmisc) is even more of a sin than either top
posting, or pleading with us to write programs for you...

-jp

.

Relevant Pages

  • Re: complicated parsing from the file
    ... Finding Details ... This vulnerability could not be checked by the program, ... Using a privileged account to perform routine functions makes the ... Administrators will be properly trained. ...
    (perl.beginners)
  • [UNIX] Admin Access Vulnerability in P-News (Records Injection)
    ... housewarming rates on automated network vulnerability ... 'Member' privileges to gain elevated privileges by inserting an additional ... account due to a flaw in the 'p-news.php' file. ... Below is an example of a normal database: ...
    (Securiteam)
  • Re: complicated parsing from the file
    ... PDI ID: 1836 ... This vulnerability could not be checked by the program, ... Using a privileged account to perform routine functions makes the ... Administrators will be properly trained. ...
    (perl.beginners)
  • complicated parsing from the file
    ... PDI ID: 1836 ... This vulnerability could not be checked by the program, ... Using a privileged account to perform routine functions makes the ... Administrators will be properly trained. ...
    (perl.beginners)
  • Re: converting line input into columns
    ... Manual Fix Procedures ... II Using a privileged account to perform routine functions ... privileges. ... Administrators will be properly trained. ...
    (comp.lang.perl.misc)