mihari 4.12.0 → 5.0.0

data/sig/lib/mihari/mixins/error_notification.rbs

@@ -1,12 +0,0 @@
-module Mihari
-  module Mixins
-    module ErrorNotification
-			#
-			# Send an exception notification if there is any error in a block
-			#
-			# @return [Nil]
-			#
-			def with_error_notification: () { () -> untyped } -> void
-    end
-  end
-end

data/sig/lib/mihari/mixins/hash.rbs

@@ -1,14 +0,0 @@
-module Mihari
-  module Mixins
-    module Hash
-      #
-      # Symbolize hash keys
-      #
-      # @param [Hash] hash
-      #
-      # @return [Hash]
-      #
-      def symbolize_hash: (Hash hash) -> Hash
-    end
-  end
-end

data/sig/lib/mihari/mixins/refang.rbs

@@ -1,14 +0,0 @@
-module Mihari
-  module Mixins
-    module Refang
-      #
-      # Refang defanged indicator
-      #
-      # @param [String] indicator
-      #
-      # @return [String]
-      #
-      def refang: (String indicator) -> String
-    end
-  end
-end

data/sig/lib/mihari/mixins/retriable.rbs

@@ -1,15 +0,0 @@
-module Mihari
-  module Mixins
-    module Retriable
-      #
-      # Retry on error
-      #
-      # @param [Integer] times
-      # @param [Integer] interval
-      #
-      # @return [nil]
-      #
-      def retry_on_error: (?times: ::Integer times, ?interval: ::Integer interval) { () -> untyped } -> nil
-    end
-  end
-end

data/sig/lib/mihari/models/alert.rbs

@@ -1,18 +0,0 @@
-module Mihari
-  class Alert < ActiveRecord::Base
-    attr_accessor title (): String
-    attr_accessor description (): String?
-    attr_accessor source (): String
-
-    attr_accessor artifacts(): Array[Mihari::Artifact]
-    attr_accessor Tags(): Array[Mihari::Tag]
-
-    def self.search: (Mihari::Structs::Filters::Alert::SearchFilterWithPagination filter) -> Array[Mihari::Alert]
-
-    def self.count: (Mihari::Structs::Filters::Alert::SearchFilter filter) -> Integer
-
-    private
-
-    def self.build_relation: (Mihari::Structs::Filters::Alert::SearchFilter filter) -> Mihari::Alert
-  end
-end

data/sig/lib/mihari/models/artifact.rbs

@@ -1,69 +0,0 @@
-class ArtifactValidator < ActiveModel::Validator
-  def validate: (Mihari::Artifact record) -> (nil | Mihari::Artifact)
-end
-
-module Mihari
-  class Artifact < ActiveRecord::Base
-    attr_accessor data (): String
-    attr_accessor data_type (): String
-
-    attr_accessor metadata(): Hash?
-
-    attr_accessor autonomous_system(): Mihari::AutonomousSystem
-    attr_accessor geolocation (): Mihari::Geolocation
-    attr_accessor whois_record(): Mihari::WhoisRecord
-    attr_accessor dns_records(): Array[Mihari::DnsRecord]
-    attr_accessor reverse_dns_names(): Array[Mihari::ReverseDnsName]
-    attr_accessor cpes(): Array[Mihari::CPE]
-    attr_accessor ports(): Array[Mihari::Port]
-
-    include ActiveModel::Validations
-
-    def initialize: (Hash[(String | Symbol), untyped] attributes) -> void
-
-    #
-    # Check uniqueness of artifact
-    #
-    # @param [Boolean] ignore_old_artifacts
-    # @param [Integer] ignore_threshold
-    #
-    # @return [Boolean] true if it is unique. Otherwise false.
-    #
-    def unique?: (?ignore_old_artifacts: bool ignore_old_artifacts, ?ignore_threshold: ::Integer ignore_threshold) -> (bool)
-
-    #
-    # Enrich(add) whois record
-    #
-    def enrich_whois: () -> void
-
-    #
-    # Enrich(add) DNS records
-    #
-    def enrich_dns: () -> void
-
-    #
-    # Enrich(add) reverse DNS names
-    #
-    def enrich_reverse_dns: () -> void
-
-    def enrich_geolocation: () -> void
-
-    def enrich_autonomous_system: () -> void
-
-    def enrich_all: () -> void
-
-    private
-
-    def normalize_as_domain: (String url_or_domain) -> String
-
-    def can_enrich_whois?: () -> bool
-
-    def can_enrich_dns?: () -> bool
-
-    def can_enrich_revese_dns?: () -> bool
-
-    def can_enrich_geolocation?: () -> bool
-
-    def can_enrich_autonomous_system?: () -> bool
-  end
-end

data/sig/lib/mihari/models/autonomous_system.rbs

@@ -1,14 +0,0 @@
-module Mihari
-  class AutonomousSystem < ActiveRecord::Base
-    attr_accessor asn (): Integer
-
-    #
-    # Build AS by IP
-    #
-    # @param [String] ip
-    #
-    # @return [Mihari::AutonomousSystem]
-    #
-    def self.build_by_ip: (String ip) -> Mihari::AutonomousSystem?
-  end
-end

data/sig/lib/mihari/models/cpe.rbs

@@ -1,7 +0,0 @@
-module Mihari
-  class CPE < ActiveRecord::Base
-    attr_accessor cpe (): String
-
-    def self.build_by_ip: (String ip) ->  Array[Mihari::CPE]
-  end
-end

data/sig/lib/mihari/models/dns.rbs

@@ -1,19 +0,0 @@
-module Mihari
-  class DnsRecord < ActiveRecord::Base
-    attr_accessor resource (): String
-    attr_accessor value (): String
-
-    #
-    # Build DNS records
-    #
-    # @param [String] domain
-    #
-    # @return [Array<Mihari::DnsRecord>]
-    #
-    def self.build_by_domain: (String domain) -> Array[Mihari::DnsRecord]
-
-    private
-
-    def self.get_values: (String domain, singleton(Resolv::DNS::Query) resource_type) -> Array[Mihari::DnsRecord]
-  end
-end

data/sig/lib/mihari/models/geolocation.rbs

@@ -1,15 +0,0 @@
-module Mihari
-  class Geolocation < ActiveRecord::Base
-    attr_accessor country (): String
-    attr_accessor country_code (): String
-
-    #
-    # Build geolocation by IP
-    #
-    # @param [String] ip
-    #
-    # @return [Mihari::Geolocation]
-    #
-    def self.build_by_ip: (String ip) -> Mihari::Geolocation?
-  end
-end

data/sig/lib/mihari/models/port.rbs

@@ -1,7 +0,0 @@
-module Mihari
-  class Port < ActiveRecord::Base
-    attr_accessor port (): Integer
-
-    def self.build_by_ip: (String ip) ->  Array[Mihari::Port]
-  end
-end

data/sig/lib/mihari/models/reverse_dns.rbs

@@ -1,14 +0,0 @@
-module Mihari
-  class ReverseDnsName < ActiveRecord::Base
-    attr_accessor name (): String
-
-    #
-    # Build reverse DNS names
-    #
-    # @param [String] ip
-    #
-    # @return [Array<Mihari::ReverseDnsName>]
-    #
-    def self.build_by_ip: (String ip) -> Array[Mihari::ReverseDnsName]
-  end
-end

data/sig/lib/mihari/models/rule.rbs

@@ -1,17 +0,0 @@
-module Mihari
-  class Rule < ActiveRecord::Base
-    attr_accessor id(): String
-    attr_accessor title(): String
-    attr_accessor description(): String
-    attr_accessor data(): Hash
-    attr_accessor yaml(): String?
-
-    def symbolized_data: () -> Hash
-
-    def to_h: () -> Hash
-
-    def self.search: (Mihari::Structs::Filters::Rule::SearchFilterWithPagination filter) -> Array[Mihari::Rule]
-
-    def self.count: (Mihari::Structs::Filters::Rule::SearchFilter filter) -> Integer
-  end
-end

data/sig/lib/mihari/models/tag.rbs

@@ -1,5 +0,0 @@
-module Mihari
-  class Tag < ActiveRecord::Base
-    attr_accessor name (): String
-  end
-end

data/sig/lib/mihari/models/tagging.rbs

@@ -1,4 +0,0 @@
-module Mihari
-  class Tagging < ActiveRecord::Base
-  end
-end

data/sig/lib/mihari/models/whois.rbs

@@ -1,66 +0,0 @@
-module Mihari
-  class WhoisRecord < ActiveRecord::Base
-    attr_accessor domain (): String
-    attr_accessor created_on (): DateTime?
-    attr_accessor updated_on (): DateTime?
-    attr_accessor expires_on (): DateTime?
-    attr_accessor registrar (): Hash[(String | Symbol), untyped]
-    attr_accessor contacts (): Array[Hash[(String | Symbol), untyped]]
-
-    #
-    # Build whois record
-    #
-    # @param [Stinrg] domain
-    #
-    # @return [WhoisRecord, nil]
-    #
-    def self.build_by_domain: (String domain) -> Mihari::WhoisRecord?
-
-    private
-
-    #
-    # Get created_on
-    #
-    # @param [::Whois::Parser:] parser
-    #
-    # @return [Date, nil]
-    #
-    def self.get_created_on: (untyped parser) -> Date?
-
-    #
-    # Get updated_on
-    #
-    # @param [::Whois::Parser:] parser
-    #
-    # @return [Date, nil]
-    #
-    def self.get_updated_on: (untyped parser) -> Date?
-
-    #
-    # Get expires_on
-    #
-    # @param [::Whois::Parser:] parser
-    #
-    # @return [Date, nil]
-    #
-    def self.get_expires_on: (untyped parser) -> Date?
-
-    #
-    # Get registrar
-    #
-    # @param [::Whois::Parser:] parser
-    #
-    # @return [Hash, nil]
-    #
-    def self.get_registrar: (untyped parser) -> Hash[(String | Symbol), untyped]?
-
-    #
-    # Get contacts
-    #
-    # @param [::Whois::Parser:] parser
-    #
-    # @return [Array[Hash[(String | Symbol), untyped]], nil]
-    #
-    def self.get_contacts: (untyped parser) -> Array[Hash[(String | Symbol), untyped]]?
-  end
-end

data/sig/lib/mihari/status.rbs

@@ -1,25 +0,0 @@
-module Mihari
-  class Status
-    def check: () -> Array[Hash[(String | Symbol), untyped]]
-
-    def self.check: () -> Array[Hash[(String | Symbol), untyped]]
-
-    private
-
-    #
-    # Statuses of analyzers and emitters
-    #
-    # @return [Array<Hash>]
-    #
-    def statuses: () -> Array[Hash[(String | Symbol), untyped]]
-
-    #
-    # Build a status of a class
-    #
-    # @param [Class<Mihari::Analyzers::Base>, Class<Mihari::Emitters::Base>] klass
-    #
-    # @return [Hash, nil]
-    #
-    def build_status: (singleton(Mihari::Analyzers::Base) | singleton(Mihari::Emitters::Base)) -> Hash[(String|Symbol), untyped]?
-  end
-end

data/sig/lib/mihari/structs/censys.rbs

@@ -1,58 +0,0 @@
-module Mihari
-  module Structs
-    module Censys
-      class AutonomousSystem
-        attr_reader asn: Integer
-
-        def self.from_dynamic!: (Hash[(String | Symbol), untyped] d) -> Mihari::Structs::Censys::AutonomousSystem
-      end
-
-      class Location
-        attr_reader country: String
-        attr_reader country_code: String
-
-        def self.from_dynamic!: (Hash[(String | Symbol), untyped] d) -> Mihari::Structs::Censys::Location
-      end
-
-      class Service
-        attr_reader port: Integer
-
-        def self.from_dynamic!: (Hash[(String | Symbol), untyped] d) -> Mihari::Structs::Censys::Service
-      end
-
-      class Hit
-        attr_reader ip: String
-        attr_reader location: Mihari::Structs::Censys::Location
-        attr_reader autonomous_system: Mihari::Structs::Censys::AutonomousSystem
-        attr_reader metadata: Hash[(String | Symbol), untyped]
-        attr_reader services: Array[Mihari::Structs::Censys::Service]
-
-        def self.from_dynamic!: (Hash[(String | Symbol), untyped] d) -> Mihari::Structs::Censys::Hit
-      end
-
-      class Links
-        attr_reader next: String
-        attr_reader prev: String
-
-        def self.from_dynamic!: (Hash[(String | Symbol), untyped] d) -> Mihari::Structs::Censys::Links
-      end
-
-      class Result
-        attr_reader query: String
-        attr_reader total: Integer
-        attr_reader hits: Array[Mihari::Structs::Censys::Hit]
-        attr_reader links: Mihari::Structs::Censys::Links
-
-        def self.from_dynamic!: (Hash[(String | Symbol), untyped] d) -> Mihari::Structs::Censys::Result
-      end
-
-      class Response
-        attr_reader code: Integer
-        attr_reader status: String
-        attr_reader result: Mihari::Structs::Censys::Result
-
-        def self.from_dynamic!: (Hash[(String | Symbol), untyped] d) -> Mihari::Structs::Censys::Response
-      end
-    end
-  end
-end

data/sig/lib/mihari/structs/filters.rbs

@@ -1,40 +0,0 @@
-module Mihari
-  module Structs
-    module Filters
-      module Alert
-        class SearchFilter < Dry::Struct
-          attr_reader artifact_data: String?
-          attr_reader description: String?
-          attr_reader source: String?
-          attr_reader tag_name: String?
-          attr_reader title: String?
-          attr_reader from_at: DateTime?
-          attr_reader to_at: DateTime?
-          attr_reader asn: Integer?
-          attr_reader dns_record: String?
-          attr_reader reverse_dns_name: String?
-
-          def valid_artifact_filters?: () -> bool
-        end
-
-        class SearchFilterWithPagination < SearchFilter
-          def without_pagination: () ->  Mihari::Structs::Filters::Alert::SearchFilter
-        end
-      end
-
-      module Rule
-        class SearchFilter < Dry::Struct
-          attr_reader page: Integer?
-          attr_reader tag: String?
-          attr_reader source: String?
-          attr_reader from_at: DateTime?
-          attr_reader to_at: DateTime?
-        end
-
-        class SearchFilterWithPagination < SearchFilter
-          def without_pagination: () ->  Mihari::Structs::Filters::Rule::SearchFilter
-        end
-      end
-    end
-  end
-end

data/sig/lib/mihari/structs/google_public_dns.rbs

@@ -1,21 +0,0 @@
-module Mihari
-  module Structs
-    module GooglePublicDNS
-      INT_TYPE_TO_TYPE: { 1 => "A", 2 => "NS", 5 => "CNAME", 16 => "TXT", 28 => "AAAA" }
-
-      class Answer < Dry::Struct
-			  attr_reader name: String
-        attr_reader data: String
-        attr_reader resource_type: String
-
-        def self.from_dynamic!: (Hash[(String | Symbol), untyped] d) -> Mihari::Structs::GooglePublicDNS::Answer
-      end
-
-      class Response < Dry::Struct
-        attr_reader answers: Array[Mihari::Structs::GooglePublicDNS::Answer]
-
-        def self.from_dynamic!: (Hash[(String | Symbol), untyped] d) -> Mihari::Structs::GooglePublicDNS::Response
-      end
-    end
-  end
-end

data/sig/lib/mihari/structs/greynoise.rbs

@@ -1,30 +0,0 @@
-module Mihari
-  module Structs
-    module GreyNoise
-      class Metadata < Dry::Struct
-        attr_reader country: String
-        attr_reader country_code: String
-        attr_reader asn: String
-
-        def self.from_dynamic!: (Hash[(String | Symbol), untyped] d) ->  Mihari::Structs::GreyNoise::Metadata
-      end
-
-      class Datum < Dry::Struct
-        attr_reader ip: String
-        attr_reader metadata: Mihari::Structs::GreyNoise::Metadata
-
-        def self.from_dynamic!: (Hash[(String | Symbol), untyped] d) -> Mihari::Structs::GreyNoise::Datum
-      end
-
-      class Response < Dry::Struct
-        attr_reader complete: Boolean
-        attr_reader count: Integer
-        attr_reader data: Array[Mihari::Structs::GreyNoise::Danum]
-        attr_reader message: String
-        attr_reader query: String
-
-        def self.from_dynamic!: (Hash[(String | Symbol), untyped] d) -> Mihari::Structs::GreyNoise::Response
-      end
-    end
-  end
-end

data/sig/lib/mihari/structs/ipinfo.rbs

@@ -1,17 +0,0 @@
-module Mihari
-  module Structs
-    module IPInfo
-      class Response
-        attr_reader ip: String
-        attr_reader hostname: String?
-        attr_reader loc: String?
-        attr_reader country_code: String?
-        attr_reader asn: Integer?
-
-        def self.from_dynamic!: (Hash[(String | Symbol), untyped] d) -> Mihari::Structs::IPInfo::Response
-
-        def to_hash: () -> Hash[(String | Symbol), untyped]
-      end
-    end
-  end
-end

data/sig/lib/mihari/structs/onyphe.rbs

@@ -1,25 +0,0 @@
-module Mihari
-  module Structs
-    module Onyphe
-      class Result
-        attr_reader asn: String
-        attr_reader country_code: String?
-        attr_reader ip: String
-
-        def self.from_dynamic!: (Hash[(String | Symbol), untyped] d) -> Mihari::Structs::Onyphe::Result
-      end
-
-      class Response
-        attr_reader count: Integer
-        attr_reader error: Integer
-        attr_reader max_page: Integer
-        attr_reader page: String
-        attr_reader results: Array[Mihari::Structs::Onyphe::Result]
-        attr_reader status: String
-        attr_reader total: Integer
-
-        def self.from_dynamic!: (Hash[(String | Symbol), untyped] d) -> Mihari::Structs::Onyphe::Response
-      end
-    end
-  end
-end

data/sig/lib/mihari/structs/rule.rbs

@@ -1,57 +0,0 @@
-module Mihari
-  module Structs
-    class Rule
-      attr_reader data: Hash
-
-      attr_reader yaml: String
-
-      attr_reader errors: Array[untypes]?
-
-      def initialize: (Hash data) -> void
-
-      #
-      # @return [Boolean]
-      #
-      def errors?: () -> (bool)
-
-      #
-      # @return [Array[String]]
-      #
-      def error_messages: () -> (Array[String])
-
-      def validate: () -> void
-
-      def validate!: () -> void
-
-      def []: (untyped key) -> untyped
-
-      #
-      # @return [String]
-      #
-      def id: () -> String
-
-      #
-      # @return [String]
-      #
-      def title: () -> String
-
-      #
-      # @return [String]
-      #
-      def description: () -> String
-
-      #
-      # @return [Mihari::Rule]
-      #
-      def to_model: () -> Mihari::Rule
-
-      def to_analyzer: () -> Mihari::Analyzers::Rule
-
-      def self.from_model: (Mihari::Rule model) -> Mihari::Structs::Rule
-
-      def self.from_yaml: (String yaml) -> Mihari::Structs::Rule
-
-      def self.from_path_or_id: (String path_or_id) -> Mihari::Structs::Rule
-    end
-  end
-end

data/sig/lib/mihari/structs/shodan.rbs

@@ -1,30 +0,0 @@
-module Mihari
-  module Structs
-    module Shodan
-      class Location
-        attr_reader country_code: String?
-        attr_reader country_name: String?
-
-        def self.from_dynamic!: (Hash[(String | Symbol), untyped] d) -> Mihari::Structs::Shodan::Location
-      end
-
-      class Match
-        attr_reader asn: String?
-        attr_reader hostnames: Array[String]
-        attr_reader location: Mihari::Structs::Shodan::Location
-        attr_reader domains: Array[String]
-        attr_reader ip_str: String
-        attr_reader port: Integer
-
-        def self.from_dynamic!: (Hash[(String | Symbol), untyped] d) -> Mihari::Structs::Shodan::Match
-      end
-
-      class Result
-        attr_reader matches: Array[Mihari::Structs::Shodan::Match]
-        attr_reader total: Integer
-
-        def self.from_dynamic!: (Hash[(String | Symbol), untyped] d) -> Mihari::Structs::Shodan::Result
-      end
-    end
-  end
-end

data/sig/lib/mihari/structs/urlscan.rbs

@@ -1,28 +0,0 @@
-module Mihari
-  module Structs
-    module Urlscan
-      class Page < Dry::Struct
-        attr_reader domain: String?
-        attr_reader ip: String?
-        attr_reader url: String
-
-        def self.from_dynamic!: (Hash[(String | Symbol), untyped] d) -> Mihari::Structs::Urlscan::Page
-      end
-
-      class Result < Dry::Struct
-        attr_reader page: Mihari::Structs::Urlscan::Page
-        attr_reader id: String
-        attr_reader sort: Array[Integer | String]
-
-        def self.from_dynamic!: (Hash[(String | Symbol), untyped] d) -> Mihari::Structs::Urlscan::Result
-      end
-
-      class Response < Dry::Struct
-        attr_reader results: Array[Mihari::Structs::Urlscan::Result]
-        attr_reader has_more: Boolean
-
-        def self.from_dynamic!: (Hash[(String | Symbol), untyped] d) -> Mihari::Structs::Urlscan::Response
-      end
-    end
-  end
-end