StackStorm BSides Ljubljana 2015 Demo

Actions and workflows used in my StackStorm BSides Ljubljana 2015 presentation.

Used packs:

• core
• st2
• linux
• libcloud
• rackspace
• mailgun

Workflows

collect_information

This workflow retrieves forensic information from a provided server.

lockdown

This workflow puts server in a "lockdown" mode.

notify_administrators

This workflow notifies administrators about a potential breach.