mihari 6.3.0 → 7.0.1

data/lib/mihari/enrichers/ipinfo.rb

@@ -1,52 +0,0 @@
-# frozen_string_literal: true
-
-module Mihari
-  module Enrichers
-    #
-    # IPInfo enricher
-    #
-    class IPInfo < Base
-      # @return [String, nil]
-      attr_reader :api_key
-
-      #
-      # @param [Hash, nil] options
-      # @param [String, nil] api_key
-      #
-      def initialize(options: nil, api_key: nil)
-        @api_key = api_key || Mihari.config.ipinfo_api_key
-
-        super(options: options)
-      end
-
-      def configuration_keys
-        %w[ipinfo_api_key]
-      end
-
-      #
-      # Query IPInfo
-      #
-      # @param [String] ip
-      #
-      # @return [Mihari::Structs::IPInfo::Response]
-      #
-      def call(ip)
-        url = "https://ipinfo.io/#{ip}/json"
-        res = http.get(url)
-        Structs::IPInfo::Response.from_dynamic! JSON.parse(res.body.to_s)
-      end
-      memo_wise :call
-
-      private
-
-      def headers
-        authorization = api_key.nil? ? nil : "Bearer #{api_key}"
-        { authorization: authorization }.compact
-      end
-
-      def http
-        HTTP::Factory.build headers: headers, timeout: timeout
-      end
-    end
-  end
-end

data/lib/mihari/entities/message.rb

@@ -1,9 +0,0 @@
-# frozen_string_literal: true
-
-module Mihari
-  module Entities
-    class Message < Grape::Entity
-      expose :message, documentation: { type: String, required: true }
-    end
-  end
-end

data/lib/mihari/feed/parser.rb

@@ -1,38 +0,0 @@
-# frozen_string_literal: true
-
-require "jr/cli/core_ext"
-
-module Mihari
-  module Feed
-    #
-    # Feed parser
-    #
-    class Parser
-      # @return [Array<Hash>, Array<Array<String>>]
-      attr_reader :data
-
-      #
-      # @param [Array<Hash>, Array<Array<String>>] data
-      #
-      def initialize(data)
-        @data = data
-      end
-
-      #
-      # Parse data by selector
-      #
-      # @param [String] selector
-      #
-      # @return [Array<String>]
-      #
-      def parse(selector)
-        parsed = data.instance_eval(selector)
-
-        raise TypeError unless parsed.is_a?(Array) || parsed.is_a?(Enumerator)
-        raise TypeError unless parsed.all?(String)
-
-        parsed.to_a
-      end
-    end
-  end
-end

data/lib/mihari/feed/reader.rb

@@ -1,111 +0,0 @@
-# frozen_string_literal: true
-
-require "csv"
-
-module Mihari
-  module Feed
-    #
-    # Feed reader
-    #
-    class Reader
-      # @return [String]
-      attr_reader :url
-
-      # @return [Hash]
-      attr_reader :headers
-
-      # @return [Hash, nil]
-      attr_reader :params
-
-      # @return [Hash, nil]
-      attr_reader :json
-
-      # @return [Hash, nil]
-      attr_reader :data
-
-      # @return [String]
-      attr_reader :method
-
-      # @return [Integer, nil]
-      attr_reader :timeout
-
-      def initialize(url, headers: {}, method: "GET", params: nil, json: nil, data: nil, timeout: nil)
-        @url = Addressable::URI.parse(url)
-        @headers = headers
-        @method = method
-        @timeout = timeout
-
-        @params = params
-        @json = json
-        @data = data
-      end
-
-      #
-      # @return [Array<Hash>]
-      #
-      def read
-        return read_file(url.path) if url.scheme == "file"
-
-        res = nil
-        res = http.get(url, params: params) if method == "GET"
-        res = http.post(url, params: params, json: json, form: data) if method == "POST"
-
-        return [] if res.nil?
-
-        body = res.body.to_s
-        content_type = res["Content-Type"].to_s
-        return convert_as_json(body) if content_type.include?("application/json")
-
-        convert_as_csv(body)
-      end
-
-      #
-      # Convert text as JSON
-      #
-      # @param [String] text
-      #
-      # @return [Array<Hash>]
-      #
-      def convert_as_json(text)
-        parsed = JSON.parse(text, symbolize_names: true)
-        return parsed if parsed.is_a?(Array)
-
-        [parsed]
-      end
-
-      #
-      # Convert text as CSV
-      #
-      # @param [String] text
-      #
-      # @return [Array<Hash>]
-      #
-      def convert_as_csv(text)
-        text_without_comments = text.lines.reject { |line| line.start_with? "#" }.join("\n")
-
-        CSV.new(text_without_comments).to_a.reject(&:empty?)
-      end
-
-      #
-      # Read & convert a file
-      #
-      # @param [String] path
-      #
-      # @return [Array<Hash>]
-      #
-      def read_file(path)
-        text = File.read(path)
-
-        return convert_as_json(text) if path.end_with?(".json")
-
-        convert_as_csv text
-      end
-
-      private
-
-      def http
-        HTTP::Factory.build headers: headers, timeout: timeout
-      end
-    end
-  end
-end

data/lib/mihari/mixins/configurable.rb

@@ -1,68 +0,0 @@
-# frozen_string_literal: true
-
-module Mihari
-  module Mixins
-    #
-    # Configurable mixin
-    #
-    module Configurable
-      #
-      # Check whether there are configuration key-values or not
-      #
-      # @return [Boolean]
-      #
-      def configuration_keys?
-        return true if configuration_keys.empty?
-
-        configuration_keys.all? { |key| Mihari.config.send(key) }
-      end
-
-      #
-      # Check whether it is configured or not
-      #
-      # @return [Boolean]
-      #
-      def configured?
-        configuration_keys? || api_key?
-      end
-
-      #
-      # Configuration values
-      #
-      # @return [Array<Hash>, nil] Configuration values as a list of hash. Returns nil if there is any keys.
-      #
-      def configuration_values
-        return nil if configuration_keys.empty?
-
-        configuration_keys.map do |key|
-          value = Mihari.config.send(key)
-          value = "REDACTED" if value && Mihari.config.hide_config_values
-          { key: key.upcase, value: value }
-        end
-      end
-
-      #
-      # Configuration keys
-      #
-      # @return [Array<String>] A list of configuration keys
-      #
-      def configuration_keys
-        []
-      end
-
-      private
-
-      #
-      # Check whether API key is set or not
-      #
-      # @return [Boolean]
-      #
-      def api_key?
-        value = method(:api_key).call
-        !value.nil?
-      rescue NameError
-        true
-      end
-    end
-  end
-end

data/lib/mihari/schemas/mixins.rb

@@ -1,20 +0,0 @@
-# frozen_string_literal: true
-
-module Mihari
-  module Schemas
-    #
-    # Mixins for schemas
-    #
-    module Mixins
-      def get_or_composition
-        schemas = constants.map { |sym| const_get sym }
-        return schemas.first if schemas.length <= 1
-
-        base, *others = schemas
-        others.each { |other| base = base.or(other) }
-
-        base
-      end
-    end
-  end
-end

data/lib/mihari/services/alert_runner.rb

@@ -1,20 +0,0 @@
-# frozen_string_literal: true
-
-module Mihari
-  module Services
-    #
-    # Alert runner
-    #
-    class AlertRunner < Service
-      #
-      # @param [Mihari::Services::AlertProxy] alert
-      #
-      # @return [Mihari::Models::Alert]
-      #
-      def call(alert)
-        emitter = Emitters::Database.new(rule: alert.rule)
-        emitter.call alert.artifacts
-      end
-    end
-  end
-end

data/lib/mihari/services/rule_builder.rb

@@ -1,46 +0,0 @@
-# frozen_string_literal: true
-
-require "date"
-require "erb"
-require "pathname"
-require "yaml"
-
-module Mihari
-  module Services
-    #
-    # Rule builder
-    #
-    class RuleBuilder < Service
-      # @return [String]
-      attr_reader :path_or_id
-
-      #
-      # @param [String] path_or_id
-      #
-      # @return [Hash]
-      #
-      def data
-        result = Try { Mihari::Models::Rule.find path_or_id }.to_result
-        return result.value! if result.success?
-
-        raise ArgumentError, "#{path_or_id} does not exist" unless Pathname(path_or_id).exist?
-
-        YAML.safe_load(
-          ERB.new(File.read(path_or_id)).result,
-          permitted_classes: [Date, Symbol]
-        )
-      end
-
-      #
-      # @param [String] path_or_id
-      #
-      # @return [Mihari::Rule]
-      #
-      def call(path_or_id)
-        @path_or_id = path_or_id
-
-        Rule.new(**data)
-      end
-    end
-  end
-end

data/lib/mihari/structs/ipinfo.rb

@@ -1,53 +0,0 @@
-# frozen_string_literal: true
-
-module Mihari
-  module Structs
-    module IPInfo
-      class Response < Dry::Struct
-        # @!attribute [r] ip
-        #   @return [String]
-        attribute :ip, Types::String
-
-        # @!attribute [r] hostname
-        #   @return [String, nil]
-        attribute :hostname, Types::String.optional
-
-        # @!attribute [r] loc
-        #   @return [String, nil]
-        attribute :loc, Types::String.optional
-
-        # @!attribute [r] country_code
-        #   @return [String, nil]
-        attribute :country_code, Types::String.optional
-
-        # @!attribute [r] asn
-        #   @return [Integer, nil]
-        attribute :asn, Types::Int.optional
-
-        class << self
-          include Mixins::AutonomousSystem
-
-          #
-          # @param [Hash] d
-          #
-          def from_dynamic!(d)
-            d = d.deep_stringify_keys
-            d = Types::Hash[d]
-
-            asn = nil
-            asn_ = d.dig("asn", "asn")
-            asn = normalize_asn(asn_) unless asn_.nil?
-
-            new(
-              ip: d.fetch("ip"),
-              loc: d["loc"],
-              hostname: d["hostname"],
-              country_code: d["country"],
-              asn: asn
-            )
-          end
-        end
-      end
-    end
-  end
-end

data/lib/mihari/web/middleware/error_notification_adapter.rb

@@ -1,35 +0,0 @@
-# frozen_string_literal: true
-
-module Mihari
-  module Web
-    module Middleware
-      #
-      # Error notification adapter for Rack app
-      #
-      class ErrorNotificationAdapter
-        include Mihari::Mixins::UnwrapError
-
-        attr_reader :app
-
-        def initialize(app)
-          @app = app
-        end
-
-        def with_error_notification
-          yield
-        rescue StandardError => e
-          unwrapped = unwrap_error(e)
-
-          Mihari.logger.error unwrapped
-          Sentry.capture_exception(unwrapped) if Sentry.initialized?
-
-          raise unwrapped
-        end
-
-        def call(env)
-          with_error_notification { app.call(env) }
-        end
-      end
-    end
-  end
-end