RSA Admin

AutoUpdate Watchlist

Discussion created by RSA Admin Employee on Nov 9, 2010
Latest reply on Apr 14, 2011 by RSA Admin

Ive been working on a VBscript to auto update watchlists for a while now. I have finally cracked it and would like to share it with everyone.

 

It started out that i wanted to pull users for AD (disabled users) and monitor if they get enabled and logged into. I thought must be simple enough to automate. Then relised that there was a limit of 32k using the methods Envision had out the box.

 

The AutoUpdate script is separated into 2 parts. The first part does the AD look ups and outputs to a TXT file on the Envision Appliance. The second part converts the TXT file into a .sql file and injects it into the Sybase DB.


The process has to be setup this way as the the Envision box is seporated and on its own domain.

 

I hope these help others out, let me know if you have any issues.

 

Attachments

Outcomes