This tool simulates automated defensive actions, such as blocking an IP address on a firewall, in response to detected threats.
Quick Start
To use this tool, run the responder:
# Block an IP address
python lab_runner.py incident-response --ip 10.10.10.xxx --reason "Malicious Activity Detected"