mihari 0.17.4 → 1.1.1

data/lib/mihari/artifact.rb

@@ -1,36 +0,0 @@
-# frozen_string_literal: true
-
-module Mihari
-  class Artifact
-    attr_reader :data
-
-    #
-    # @param [String] data
-    # @param [String, nil] message
-    #
-    def initialize(data, message: nil)
-      @data = data
-      @message = message
-    end
-
-    # @return [String, nil]
-    def data_type
-      TypeChecker.type data
-    end
-
-    # @return [String]
-    def message
-      @mesasge || data
-    end
-
-    # @return [true, false]
-    def valid?
-      !data_type.nil?
-    end
-
-    # @return [Hash]
-    def to_h
-      { data: data, data_type: data_type, message: message }
-    end
-  end
-end

data/lib/mihari/cache.rb

@@ -1,35 +0,0 @@
-# frozen_string_literal: true
-
-require "lightly"
-
-module Mihari
-  class Cache
-    DEFAULT_CACHE_DIR = "/tmp/mihari"
-
-    def initialize
-      @data = Lightly.new(life: "7d", dir: DEFAULT_CACHE_DIR)
-    end
-
-    def cached?(key)
-      return false unless @data.enabled?
-
-      begin
-        @data.cached? key
-      rescue Errno::ENOENT => _e
-        false
-      end
-    end
-
-    def save(*keys)
-      return unless @data.enabled?
-
-      begin
-        keys.flatten.each do |key|
-          @data.save key, true
-        end
-      rescue Errno::ENOENT => _e
-        nil
-      end
-    end
-  end
-end

data/lib/mihari/the_hive.rb

@@ -1,42 +0,0 @@
-# frozen_string_literal: true
-
-require "net/ping"
-require "uri"
-
-module Mihari
-  class TheHive
-    attr_reader :artifact
-    attr_reader :alert
-
-    def initialize
-      @artifact = Artifact.new
-      @alert = Alert.new
-    end
-
-    # @return [true, false]
-    def valid?
-      api_endpont? && api_key? && ping?
-    end
-
-    private
-
-    # @return [true, false]
-    def api_endpont?
-      ENV.key? "THEHIVE_API_ENDPOINT"
-    end
-
-    # @return [true, false]
-    def api_key?
-      ENV.key? "THEHIVE_API_KEY"
-    end
-
-    def ping?
-      base_url = ENV.fetch("THEHIVE_API_ENDPOINT")
-      base_url = base_url.end_with?("/") ? base_url[0..-2] : base_url
-      url = "#{base_url}/index.html"
-
-      http = Net::Ping::HTTP.new(url)
-      http.ping?
-    end
-  end
-end

data/lib/mihari/the_hive/alert.rb

@@ -1,25 +0,0 @@
-# frozen_string_literal: true
-
-module Mihari
-  class TheHive
-    class Alert < Base
-      # @return [Array]
-      def list(range: "all", sort: "-date")
-        alerts = api.alert.search({ source: "mihari" }, range: range, sort: sort)
-        alerts.sort_by { |alert| -alert.dig("createdAt") }
-      end
-
-      # @return [Hash]
-      def create(title:, description:, artifacts:, tags: [])
-        api.alert.create(
-          title: title,
-          description: description,
-          artifacts: artifacts,
-          tags: tags,
-          type: "external",
-          source: "mihari"
-        )
-      end
-    end
-  end
-end

data/lib/mihari/the_hive/artifact.rb

@@ -1,33 +0,0 @@
-# frozen_string_literal: true
-
-module Mihari
-  class TheHive
-    class Artifact < Base
-      # @return [Array]
-      def search(data:, data_type:, range: "all")
-        api.artifact.search({ data: data, data_type: data_type }, range: range)
-      end
-
-      # @return [Array]
-      def search_all(data:, range: "all")
-        api.artifact.search({ data: data }, range: range)
-      end
-
-      # @return [true, false]
-      def exists?(data:, data_type:)
-        res = search(data: data, data_type: data_type, range: "0-1")
-        !res.empty?
-      end
-
-      # @return [Array<Mihari::Artifact>]
-      def find_non_existing_artifacts(artifacts)
-        data = artifacts.map(&:data)
-        results = search_all(data: data)
-        keys = results.map { |result| result.dig("data") }.compact.uniq
-        artifacts.reject do |artifact|
-          keys.include? artifact.data
-        end
-      end
-    end
-  end
-end

data/lib/mihari/the_hive/base.rb

@@ -1,14 +0,0 @@
-# frozen_string_literal: true
-
-require "hachi"
-
-module Mihari
-  class TheHive
-    class Base
-      # @return [Hachi::API]
-      def api
-        @api ||= Hachi::API.new
-      end
-    end
-  end
-end