@ampsec/platform-client 68.2.0 → 68.4.0

package/build/src/dto/eng/coverage.dto.d.ts

@@ -0,0 +1,263 @@
+import { z } from 'zod';
+export declare enum AssetDomainStatus {
+    SECURE = "SECURE",
+    INSECURE = "INSECURE",
+    MISSING = "MISSING"
+}
+export declare const _EndUserDeviceReportDto: z.ZodObject<{
+    aid: z.ZodString;
+    displayValue: z.ZodString;
+    hostname: z.ZodOptional<z.ZodString>;
+    os: z.ZodOptional<z.ZodString>;
+    sn: z.ZodOptional<z.ZodString>;
+    hasEndpointManagement: z.ZodNativeEnum<typeof AssetDomainStatus>;
+    hasEndpointSecurity: z.ZodNativeEnum<typeof AssetDomainStatus>;
+    hasVulnManagement: z.ZodNativeEnum<typeof AssetDomainStatus>;
+}, "strip", z.ZodTypeAny, {
+    aid: string;
+    displayValue: string;
+    hasEndpointManagement: AssetDomainStatus;
+    hasEndpointSecurity: AssetDomainStatus;
+    hasVulnManagement: AssetDomainStatus;
+    hostname?: string | undefined;
+    os?: string | undefined;
+    sn?: string | undefined;
+}, {
+    aid: string;
+    displayValue: string;
+    hasEndpointManagement: AssetDomainStatus;
+    hasEndpointSecurity: AssetDomainStatus;
+    hasVulnManagement: AssetDomainStatus;
+    hostname?: string | undefined;
+    os?: string | undefined;
+    sn?: string | undefined;
+}>;
+export type EndUserDeviceReportDto = z.infer<typeof _EndUserDeviceReportDto>;
+export declare const _EndUserCoverageReportDto: z.ZodObject<{
+    uid: z.ZodString;
+    score: z.ZodNumber;
+    mfa: z.ZodObject<{
+        allowEmptyFactors: z.ZodBoolean;
+        enabled: z.ZodBoolean;
+        rating: z.ZodEnum<["SECURE", "INSECURE", "UNKNOWN", "MISSING"]>;
+        factors: z.ZodArray<z.ZodObject<{
+            cid: z.ZodOptional<z.ZodString>;
+            status: z.ZodOptional<z.ZodUnion<[z.ZodLiteral<"ACTIVE">, z.ZodString]>>;
+            vendorName: z.ZodOptional<z.ZodString>;
+            factorType: z.ZodOptional<z.ZodString>;
+            secure: z.ZodOptional<z.ZodEnum<["SECURE", "INSECURE", "UNKNOWN", "MISSING"]>>;
+        }, "strip", z.ZodString, z.objectOutputType<{
+            cid: z.ZodOptional<z.ZodString>;
+            status: z.ZodOptional<z.ZodUnion<[z.ZodLiteral<"ACTIVE">, z.ZodString]>>;
+            vendorName: z.ZodOptional<z.ZodString>;
+            factorType: z.ZodOptional<z.ZodString>;
+            secure: z.ZodOptional<z.ZodEnum<["SECURE", "INSECURE", "UNKNOWN", "MISSING"]>>;
+        }, z.ZodString, "strip">, z.objectInputType<{
+            cid: z.ZodOptional<z.ZodString>;
+            status: z.ZodOptional<z.ZodUnion<[z.ZodLiteral<"ACTIVE">, z.ZodString]>>;
+            vendorName: z.ZodOptional<z.ZodString>;
+            factorType: z.ZodOptional<z.ZodString>;
+            secure: z.ZodOptional<z.ZodEnum<["SECURE", "INSECURE", "UNKNOWN", "MISSING"]>>;
+        }, z.ZodString, "strip">>, "many">;
+    }, "strip", z.ZodTypeAny, {
+        factors: z.objectOutputType<{
+            cid: z.ZodOptional<z.ZodString>;
+            status: z.ZodOptional<z.ZodUnion<[z.ZodLiteral<"ACTIVE">, z.ZodString]>>;
+            vendorName: z.ZodOptional<z.ZodString>;
+            factorType: z.ZodOptional<z.ZodString>;
+            secure: z.ZodOptional<z.ZodEnum<["SECURE", "INSECURE", "UNKNOWN", "MISSING"]>>;
+        }, z.ZodString, "strip">[];
+        allowEmptyFactors: boolean;
+        enabled: boolean;
+        rating: "UNKNOWN" | "SECURE" | "INSECURE" | "MISSING";
+    }, {
+        factors: z.objectInputType<{
+            cid: z.ZodOptional<z.ZodString>;
+            status: z.ZodOptional<z.ZodUnion<[z.ZodLiteral<"ACTIVE">, z.ZodString]>>;
+            vendorName: z.ZodOptional<z.ZodString>;
+            factorType: z.ZodOptional<z.ZodString>;
+            secure: z.ZodOptional<z.ZodEnum<["SECURE", "INSECURE", "UNKNOWN", "MISSING"]>>;
+        }, z.ZodString, "strip">[];
+        allowEmptyFactors: boolean;
+        enabled: boolean;
+        rating: "UNKNOWN" | "SECURE" | "INSECURE" | "MISSING";
+    }>;
+    training: z.ZodObject<{
+        hasAccount: z.ZodBoolean;
+        overdue: z.ZodNumber;
+    }, "strip", z.ZodTypeAny, {
+        hasAccount: boolean;
+        overdue: number;
+    }, {
+        hasAccount: boolean;
+        overdue: number;
+    }>;
+    devices: z.ZodObject<{
+        rating: z.ZodNativeEnum<typeof AssetDomainStatus>;
+        allMonitored: z.ZodBoolean;
+        hasInactive: z.ZodBoolean;
+        hasMissing: z.ZodBoolean;
+        assets: z.ZodArray<z.ZodObject<{
+            aid: z.ZodString;
+            displayValue: z.ZodString;
+            hostname: z.ZodOptional<z.ZodString>;
+            os: z.ZodOptional<z.ZodString>;
+            sn: z.ZodOptional<z.ZodString>;
+            hasEndpointManagement: z.ZodNativeEnum<typeof AssetDomainStatus>;
+            hasEndpointSecurity: z.ZodNativeEnum<typeof AssetDomainStatus>;
+            hasVulnManagement: z.ZodNativeEnum<typeof AssetDomainStatus>;
+        }, "strip", z.ZodTypeAny, {
+            aid: string;
+            displayValue: string;
+            hasEndpointManagement: AssetDomainStatus;
+            hasEndpointSecurity: AssetDomainStatus;
+            hasVulnManagement: AssetDomainStatus;
+            hostname?: string | undefined;
+            os?: string | undefined;
+            sn?: string | undefined;
+        }, {
+            aid: string;
+            displayValue: string;
+            hasEndpointManagement: AssetDomainStatus;
+            hasEndpointSecurity: AssetDomainStatus;
+            hasVulnManagement: AssetDomainStatus;
+            hostname?: string | undefined;
+            os?: string | undefined;
+            sn?: string | undefined;
+        }>, "many">;
+    }, "strip", z.ZodTypeAny, {
+        assets: {
+            aid: string;
+            displayValue: string;
+            hasEndpointManagement: AssetDomainStatus;
+            hasEndpointSecurity: AssetDomainStatus;
+            hasVulnManagement: AssetDomainStatus;
+            hostname?: string | undefined;
+            os?: string | undefined;
+            sn?: string | undefined;
+        }[];
+        rating: AssetDomainStatus;
+        allMonitored: boolean;
+        hasInactive: boolean;
+        hasMissing: boolean;
+    }, {
+        assets: {
+            aid: string;
+            displayValue: string;
+            hasEndpointManagement: AssetDomainStatus;
+            hasEndpointSecurity: AssetDomainStatus;
+            hasVulnManagement: AssetDomainStatus;
+            hostname?: string | undefined;
+            os?: string | undefined;
+            sn?: string | undefined;
+        }[];
+        rating: AssetDomainStatus;
+        allMonitored: boolean;
+        hasInactive: boolean;
+        hasMissing: boolean;
+    }>;
+    vulns: z.ZodObject<{
+        totalOpen: z.ZodNumber;
+        criticalOpen: z.ZodNumber;
+        highOpen: z.ZodNumber;
+        mediumOpen: z.ZodNumber;
+        lowOpen: z.ZodNumber;
+    }, "strip", z.ZodTypeAny, {
+        totalOpen: number;
+        criticalOpen: number;
+        highOpen: number;
+        mediumOpen: number;
+        lowOpen: number;
+    }, {
+        totalOpen: number;
+        criticalOpen: number;
+        highOpen: number;
+        mediumOpen: number;
+        lowOpen: number;
+    }>;
+}, "strip", z.ZodTypeAny, {
+    uid: string;
+    score: number;
+    mfa: {
+        factors: z.objectOutputType<{
+            cid: z.ZodOptional<z.ZodString>;
+            status: z.ZodOptional<z.ZodUnion<[z.ZodLiteral<"ACTIVE">, z.ZodString]>>;
+            vendorName: z.ZodOptional<z.ZodString>;
+            factorType: z.ZodOptional<z.ZodString>;
+            secure: z.ZodOptional<z.ZodEnum<["SECURE", "INSECURE", "UNKNOWN", "MISSING"]>>;
+        }, z.ZodString, "strip">[];
+        allowEmptyFactors: boolean;
+        enabled: boolean;
+        rating: "UNKNOWN" | "SECURE" | "INSECURE" | "MISSING";
+    };
+    training: {
+        hasAccount: boolean;
+        overdue: number;
+    };
+    devices: {
+        assets: {
+            aid: string;
+            displayValue: string;
+            hasEndpointManagement: AssetDomainStatus;
+            hasEndpointSecurity: AssetDomainStatus;
+            hasVulnManagement: AssetDomainStatus;
+            hostname?: string | undefined;
+            os?: string | undefined;
+            sn?: string | undefined;
+        }[];
+        rating: AssetDomainStatus;
+        allMonitored: boolean;
+        hasInactive: boolean;
+        hasMissing: boolean;
+    };
+    vulns: {
+        totalOpen: number;
+        criticalOpen: number;
+        highOpen: number;
+        mediumOpen: number;
+        lowOpen: number;
+    };
+}, {
+    uid: string;
+    score: number;
+    mfa: {
+        factors: z.objectInputType<{
+            cid: z.ZodOptional<z.ZodString>;
+            status: z.ZodOptional<z.ZodUnion<[z.ZodLiteral<"ACTIVE">, z.ZodString]>>;
+            vendorName: z.ZodOptional<z.ZodString>;
+            factorType: z.ZodOptional<z.ZodString>;
+            secure: z.ZodOptional<z.ZodEnum<["SECURE", "INSECURE", "UNKNOWN", "MISSING"]>>;
+        }, z.ZodString, "strip">[];
+        allowEmptyFactors: boolean;
+        enabled: boolean;
+        rating: "UNKNOWN" | "SECURE" | "INSECURE" | "MISSING";
+    };
+    training: {
+        hasAccount: boolean;
+        overdue: number;
+    };
+    devices: {
+        assets: {
+            aid: string;
+            displayValue: string;
+            hasEndpointManagement: AssetDomainStatus;
+            hasEndpointSecurity: AssetDomainStatus;
+            hasVulnManagement: AssetDomainStatus;
+            hostname?: string | undefined;
+            os?: string | undefined;
+            sn?: string | undefined;
+        }[];
+        rating: AssetDomainStatus;
+        allMonitored: boolean;
+        hasInactive: boolean;
+        hasMissing: boolean;
+    };
+    vulns: {
+        totalOpen: number;
+        criticalOpen: number;
+        highOpen: number;
+        mediumOpen: number;
+        lowOpen: number;
+    };
+}>;
+export type EndUserCoverageReportDto = z.infer<typeof _EndUserCoverageReportDto>;

package/build/src/dto/eng/coverage.dto.js

@@ -0,0 +1,50 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports._EndUserCoverageReportDto = exports._EndUserDeviceReportDto = exports.AssetDomainStatus = void 0;
+const zod_1 = require("zod");
+const saasUsers_dto_1 = require("../saasUsers.dto");
+var AssetDomainStatus;
+(function (AssetDomainStatus) {
+    AssetDomainStatus["SECURE"] = "SECURE";
+    AssetDomainStatus["INSECURE"] = "INSECURE";
+    AssetDomainStatus["MISSING"] = "MISSING";
+})(AssetDomainStatus || (exports.AssetDomainStatus = AssetDomainStatus = {}));
+exports._EndUserDeviceReportDto = zod_1.z.object({
+    aid: zod_1.z.string(),
+    displayValue: zod_1.z.string(),
+    hostname: zod_1.z.string().optional(),
+    os: zod_1.z.string().optional(),
+    sn: zod_1.z.string().optional(),
+    hasEndpointManagement: zod_1.z.nativeEnum(AssetDomainStatus),
+    hasEndpointSecurity: zod_1.z.nativeEnum(AssetDomainStatus),
+    hasVulnManagement: zod_1.z.nativeEnum(AssetDomainStatus),
+});
+exports._EndUserCoverageReportDto = zod_1.z.object({
+    uid: zod_1.z.string(),
+    score: zod_1.z.number(),
+    mfa: zod_1.z.object({
+        allowEmptyFactors: zod_1.z.boolean(),
+        enabled: zod_1.z.boolean(),
+        rating: saasUsers_dto_1._MfaRating,
+        factors: saasUsers_dto_1._MfaFactorDto.array(),
+    }),
+    training: zod_1.z.object({
+        hasAccount: zod_1.z.boolean(),
+        overdue: zod_1.z.number(),
+    }),
+    devices: zod_1.z.object({
+        rating: zod_1.z.nativeEnum(AssetDomainStatus),
+        allMonitored: zod_1.z.boolean(),
+        hasInactive: zod_1.z.boolean(),
+        hasMissing: zod_1.z.boolean(),
+        assets: exports._EndUserDeviceReportDto.array(),
+    }),
+    vulns: zod_1.z.object({
+        totalOpen: zod_1.z.number(),
+        criticalOpen: zod_1.z.number(),
+        highOpen: zod_1.z.number(),
+        mediumOpen: zod_1.z.number(),
+        lowOpen: zod_1.z.number(),
+    }),
+});
+//# sourceMappingURL=coverage.dto.js.map

package/build/src/dto/eng/coverage.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"coverage.dto.js","sourceRoot":"","sources":["../../../../src/dto/eng/coverage.dto.ts"],"names":[],"mappings":";;;AAAA,6BAAsB;AACtB,oDAA2D;AAE3D,IAAY,iBAIX;AAJD,WAAY,iBAAiB;IAC3B,sCAAiB,CAAA;IACjB,0CAAqB,CAAA;IACrB,wCAAmB,CAAA;AACrB,CAAC,EAJW,iBAAiB,iCAAjB,iBAAiB,QAI5B;AAEY,QAAA,uBAAuB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC9C,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE;IACf,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE;IACxB,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzB,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzB,qBAAqB,EAAE,OAAC,CAAC,UAAU,CAAC,iBAAiB,CAAC;IACtD,mBAAmB,EAAE,OAAC,CAAC,UAAU,CAAC,iBAAiB,CAAC;IACpD,iBAAiB,EAAE,OAAC,CAAC,UAAU,CAAC,iBAAiB,CAAC;CACnD,CAAC,CAAC;AAGU,QAAA,yBAAyB,GAAG,OAAC,CAAC,MAAM,CAAC;IAChD,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE;IACf,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE;IACjB,GAAG,EAAE,OAAC,CAAC,MAAM,CAAC;QACZ,iBAAiB,EAAE,OAAC,CAAC,OAAO,EAAE;QAC9B,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE;QACpB,MAAM,EAAE,0BAAU;QAClB,OAAO,EAAE,6BAAa,CAAC,KAAK,EAAE;KAC/B,CAAC;IACF,QAAQ,EAAE,OAAC,CAAC,MAAM,CAAC;QACjB,UAAU,EAAE,OAAC,CAAC,OAAO,EAAE;QACvB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE;KACpB,CAAC;IACF,OAAO,EAAE,OAAC,CAAC,MAAM,CAAC;QAChB,MAAM,EAAE,OAAC,CAAC,UAAU,CAAC,iBAAiB,CAAC;QACvC,YAAY,EAAE,OAAC,CAAC,OAAO,EAAE;QACzB,WAAW,EAAE,OAAC,CAAC,OAAO,EAAE;QACxB,UAAU,EAAE,OAAC,CAAC,OAAO,EAAE;QACvB,MAAM,EAAE,+BAAuB,CAAC,KAAK,EAAE;KACxC,CAAC;IACF,KAAK,EAAE,OAAC,CAAC,MAAM,CAAC;QACd,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE;QACrB,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE;QACxB,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE;QACpB,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE;QACtB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE;KACpB,CAAC;CACH,CAAC,CAAC"}

package/build/src/dto/eng/index.d.ts

@@ -0,0 +1 @@
+export * from './coverage.dto';

package/build/src/dto/eng/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./coverage.dto"), exports);
+//# sourceMappingURL=index.js.map

package/build/src/dto/eng/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/dto/eng/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,iDAA+B"}

package/build/src/dto/enums/category.d.ts

@@ -1,5 +1,7 @@
 export declare enum Category {
     EDR = "EDR",
+    ENDPOINT_MANAGEMENT = "ENDPOINT_MANAGEMENT",
+    ENDPOINT_SECURITY = "ENDPOINT_SECURITY",
     VULNERABILITY = "VULNERABILITY",
     /**
      * @deprecated Use IDENTITY instead

package/build/src/dto/enums/category.js

@@ -4,6 +4,8 @@ exports.Category = void 0;
 var Category;
 (function (Category) {
     Category["EDR"] = "EDR";
+    Category["ENDPOINT_MANAGEMENT"] = "ENDPOINT_MANAGEMENT";
+    Category["ENDPOINT_SECURITY"] = "ENDPOINT_SECURITY";
     Category["VULNERABILITY"] = "VULNERABILITY";
     /**
      * @deprecated Use IDENTITY instead

package/build/src/dto/enums/category.js.map

@@ -1 +1 @@
-{"version":3,"file":"category.js","sourceRoot":"","sources":["../../../../src/dto/enums/category.ts"],"names":[],"mappings":";;;AAAA,IAAY,QAYX;AAZD,WAAY,QAAQ;IAClB,uBAAW,CAAA;IACX,2CAA+B,CAAA;IAC/B;;OAEG;IACH,uBAAW,CAAA;IACX,iCAAqB,CAAA;IACrB,yCAA6B,CAAA;IAC7B,iCAAqB,CAAA;IACrB,uCAA2B,CAAA;IAC3B,6BAAiB,CAAA;AACnB,CAAC,EAZW,QAAQ,wBAAR,QAAQ,QAYnB"}
+{"version":3,"file":"category.js","sourceRoot":"","sources":["../../../../src/dto/enums/category.ts"],"names":[],"mappings":";;;AAAA,IAAY,QAcX;AAdD,WAAY,QAAQ;IAClB,uBAAW,CAAA;IACX,uDAA2C,CAAA;IAC3C,mDAAuC,CAAA;IACvC,2CAA+B,CAAA;IAC/B;;OAEG;IACH,uBAAW,CAAA;IACX,iCAAqB,CAAA;IACrB,yCAA6B,CAAA;IAC7B,iCAAqB,CAAA;IACrB,uCAA2B,CAAA;IAC3B,6BAAiB,CAAA;AACnB,CAAC,EAdW,QAAQ,wBAAR,QAAQ,QAcnB"}

package/build/src/dto/enums/findingKind.d.ts

@@ -5,6 +5,7 @@ import { SaasComponentKind } from './saasComponentKind';
 export declare enum FindingKind {
     NO_ACCOUNT = "NO_ACCOUNT",
     MFA_NOT_ENABLED = "MFA_NOT_ENABLED",
+    MFA_NOT_SECURE = "MFA_NOT_SECURE",
     IS_EXECUTIVE = "IS_EXECUTIVE",
     HAS_PRODUCTION_ACCESS = "HAS_PRODUCTION_ACCESS",
     HAS_PRIVILEGED_ACCESS = "HAS_PRIVILEGED_ACCESS",

package/build/src/dto/enums/findingKind.js

@@ -11,6 +11,7 @@ var FindingKind;
     FindingKind["NO_ACCOUNT"] = "NO_ACCOUNT";
     // IDENTITY
     FindingKind["MFA_NOT_ENABLED"] = "MFA_NOT_ENABLED";
+    FindingKind["MFA_NOT_SECURE"] = "MFA_NOT_SECURE";
     FindingKind["IS_EXECUTIVE"] = "IS_EXECUTIVE";
     FindingKind["HAS_PRODUCTION_ACCESS"] = "HAS_PRODUCTION_ACCESS";
     FindingKind["HAS_PRIVILEGED_ACCESS"] = "HAS_PRIVILEGED_ACCESS";
@@ -30,6 +31,7 @@ const lookupFindingOutcomeByKind = (kind) => {
     switch (kind) {
         case FindingKind.NO_ACCOUNT:
         case FindingKind.MFA_NOT_ENABLED:
+        case FindingKind.MFA_NOT_SECURE:
         case FindingKind.TRAINING_OVERDUE:
         case FindingKind.DEVICE_NOT_MANAGED:
         case FindingKind.CRITICAL_VULNERABILITY_OUT_OF_SLA:
@@ -56,7 +58,7 @@ exports.lookupFindingOutcomeByKind = lookupFindingOutcomeByKind;
 const lookupFindingKindByCategory = (category) => {
     switch (category) {
         case category_1.Category.IDENTITY: {
-            return [FindingKind.MFA_NOT_ENABLED, FindingKind.IS_EXECUTIVE, FindingKind.HAS_PRODUCTION_ACCESS, FindingKind.HAS_PRIVILEGED_ACCESS];
+            return [FindingKind.MFA_NOT_ENABLED, FindingKind.MFA_NOT_SECURE, FindingKind.IS_EXECUTIVE, FindingKind.HAS_PRODUCTION_ACCESS, FindingKind.HAS_PRIVILEGED_ACCESS];
         }
         case category_1.Category.TRAINING: {
             return [FindingKind.FAILED_PHISHING, FindingKind.TRAINING_OVERDUE];
@@ -91,6 +93,7 @@ const lookupFindingSeverityByKind = (kind) => {
         case FindingKind.HAS_PRIVILEGED_ACCESS:
         case FindingKind.DEVICE_NOT_MANAGED:
         case FindingKind.WEB_GATEWAY_NOT_ACTIVE:
+        case FindingKind.MFA_NOT_SECURE:
             return finding_severity_1.FindingSeverity.HIGH;
         case FindingKind.MFA_NOT_ENABLED:
         case FindingKind.CRITICAL_VULNERABILITY_OUT_OF_SLA:
@@ -140,6 +143,8 @@ const lookupFindingScoreByCategoryKindAndSeverity = (category, kind) => {
             switch (kind) {
                 case FindingKind.MFA_NOT_ENABLED:
                     return 12;
+                case FindingKind.MFA_NOT_SECURE:
+                    return 5;
                 case FindingKind.NO_ACCOUNT:
                     return 12;
                 case FindingKind.IS_EXECUTIVE:
@@ -259,6 +264,10 @@ const generateInsights = (category, kind) => {
             setCondition('meta._findings.enabled', false);
             insights.rule.kind = saasComponentKind_1.SaasComponentKind.MFA_CONFIG;
             break;
+        case FindingKind.MFA_NOT_SECURE:
+            setCondition('meta._findings.hasInsecureFactors', true);
+            insights.rule.kind = saasComponentKind_1.SaasComponentKind.MFA_CONFIG;
+            break;
         case FindingKind.IS_EXECUTIVE:
             setCondition('meta._findings.isExecutive', true);
             insights.rule.kind = saasComponentKind_1.SaasComponentKind.GROUP_MEMBERSHIP;

package/build/src/dto/enums/findingKind.js.map

@@ -1 +1 @@
-{"version":3,"file":"findingKind.js","sourceRoot":"","sources":["../../../../src/dto/enums/findingKind.ts"],"names":[],"mappings":";;;AAAA,yCAAoC;AACpC,uDAAiD;AACjD,yDAAmD;AACnD,2DAAsD;AAEtD,IAAY,WAuBX;AAvBD,WAAY,WAAW;IACrB,MAAM;IACN,wCAAyB,CAAA;IAEzB,WAAW;IACX,kDAAmC,CAAA;IACnC,4CAA6B,CAAA;IAC7B,8DAA+C,CAAA;IAC/C,8DAA+C,CAAA;IAE/C,WAAW;IACX,kDAAmC,CAAA;IACnC,oDAAqC,CAAA;IAErC,MAAM;IACN,wDAAyC,CAAA;IACzC,sFAAuE,CAAA;IACvE,8EAA+D,CAAA;IAC/D,kFAAmE,CAAA;IACnE,4EAA6D,CAAA;IAE7D,cAAc;IACd,gEAAiD,CAAA;AACnD,CAAC,EAvBW,WAAW,2BAAX,WAAW,QAuBtB;AAEM,MAAM,0BAA0B,GAAG,CAAC,IAAiB,EAAkB,EAAE;IAC9E,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,WAAW,CAAC,UAAU,CAAC;QAC5B,KAAK,WAAW,CAAC,eAAe,CAAC;QACjC,KAAK,WAAW,CAAC,gBAAgB,CAAC;QAClC,KAAK,WAAW,CAAC,kBAAkB,CAAC;QACpC,KAAK,WAAW,CAAC,iCAAiC,CAAC;QACnD,KAAK,WAAW,CAAC,6BAA6B,CAAC;QAC/C,KAAK,WAAW,CAAC,+BAA+B,CAAC;QACjD,KAAK,WAAW,CAAC,4BAA4B,CAAC;QAC9C,KAAK,WAAW,CAAC,sBAAsB,CAAC,CAAC,CAAC;YACxC,OAAO,gCAAc,CAAC,WAAW,CAAC;QACpC,CAAC;QACD,KAAK,WAAW,CAAC,YAAY,CAAC;QAC9B,KAAK,WAAW,CAAC,qBAAqB,CAAC;QACvC,KAAK,WAAW,CAAC,qBAAqB,CAAC,CAAC,CAAC;YACvC,OAAO,gCAAc,CAAC,SAAS,CAAC;QAClC,CAAC;QACD,KAAK,WAAW,CAAC,eAAe,CAAC,CAAC,CAAC;YACjC,OAAO,gCAAc,CAAC,SAAS,CAAC;QAClC,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,IAAI,KAAK,CAAC,sDAAsD,IAAI,EAAE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAzBW,QAAA,0BAA0B,8BAyBrC;AAEK,MAAM,2BAA2B,GAAG,CAAC,QAAgB,EAAiB,EAAE;IAC7E,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,mBAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;YACvB,OAAO,CAAC,WAAW,CAAC,eAAe,EAAE,WAAW,CAAC,YAAY,EAAE,WAAW,CAAC,qBAAqB,EAAE,WAAW,CAAC,qBAAqB,CAAC,CAAC;QACvI,CAAC;QACD,KAAK,mBAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;YACvB,OAAO,CAAC,WAAW,CAAC,eAAe,EAAE,WAAW,CAAC,gBAAgB,CAAC,CAAC;QACrE,CAAC;QACD,KAAK,mBAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;YAClB,OAAO,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC;QAC1C,CAAC;QACD,KAAK,mBAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;YAC1B,OAAO,CAAC,WAAW,CAAC,sBAAsB,CAAC,CAAC;QAC9C,CAAC;QACD,KAAK,mBAAQ,CAAC,aAAa,CAAC,CAAC,CAAC;YAC5B,OAAO;gBACL,WAAW,CAAC,iCAAiC;gBAC7C,WAAW,CAAC,6BAA6B;gBACzC,WAAW,CAAC,+BAA+B;gBAC3C,WAAW,CAAC,4BAA4B;aACzC,CAAC;QACJ,CAAC;QACD,KAAK,mBAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;YAC3B,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACR,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AA7BW,QAAA,2BAA2B,+BA6BtC;AAEK,MAAM,2BAA2B,GAAG,CAAC,IAAY,EAA+B,EAAE;IACvF,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,WAAW,CAAC,YAAY,CAAC;QAC9B,KAAK,WAAW,CAAC,qBAAqB,CAAC;QACvC,KAAK,WAAW,CAAC,qBAAqB,CAAC;QACvC,KAAK,WAAW,CAAC,kBAAkB,CAAC;QACpC,KAAK,WAAW,CAAC,sBAAsB;YACrC,OAAO,kCAAe,CAAC,IAAI,CAAC;QAC9B,KAAK,WAAW,CAAC,eAAe,CAAC;QACjC,KAAK,WAAW,CAAC,iCAAiC;YAChD,OAAO,kCAAe,CAAC,QAAQ,CAAC;QAClC,KAAK,WAAW,CAAC,6BAA6B;YAC5C,OAAO,kCAAe,CAAC,IAAI,CAAC;QAC9B,KAAK,WAAW,CAAC,+BAA+B;YAC9C,OAAO,kCAAe,CAAC,MAAM,CAAC;QAChC,KAAK,WAAW,CAAC,4BAA4B;YAC3C,OAAO,kCAAe,CAAC,GAAG,CAAC;QAC7B,KAAK,WAAW,CAAC,eAAe,CAAC;QACjC,KAAK,WAAW,CAAC,gBAAgB;YAC/B,OAAO,kCAAe,CAAC,MAAM,CAAC;QAChC;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC,CAAC;AAvBW,QAAA,2BAA2B,+BAuBtC;AAEF,iGAAiG;AAC1F,MAAM,2CAA2C,GAAG,CAAC,QAAkB,EAAE,IAAY,EAAU,EAAE;IACtG,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,mBAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;YAClB,QAAQ,IAAI,EAAE,CAAC;gBACb,KAAK,WAAW,CAAC,kBAAkB;oBACjC,OAAO,EAAE,CAAC;gBACZ;oBACE,OAAO,CAAC,CAAC;YACb,CAAC;QACH,CAAC;QACD,KAAK,mBAAQ,CAAC,aAAa,CAAC,CAAC,CAAC;YAC5B,QAAQ,IAAI,EAAE,CAAC;gBACb,KAAK,WAAW,CAAC,kBAAkB;oBACjC,OAAO,EAAE,CAAC;gBACZ,KAAK,WAAW,CAAC,iCAAiC;oBAChD,OAAO,EAAE,CAAC;gBACZ,KAAK,WAAW,CAAC,6BAA6B;oBAC5C,OAAO,CAAC,CAAC;gBACX,KAAK,WAAW,CAAC,+BAA+B;oBAC9C,OAAO,CAAC,CAAC;gBACX,KAAK,WAAW,CAAC,4BAA4B;oBAC3C,OAAO,CAAC,CAAC;gBACX;oBACE,OAAO,CAAC,CAAC;YACb,CAAC;QACH,CAAC;QACD,KAAK,mBAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;YACvB,QAAQ,IAAI,EAAE,CAAC;gBACb,KAAK,WAAW,CAAC,eAAe;oBAC9B,OAAO,EAAE,CAAC;gBACZ,KAAK,WAAW,CAAC,UAAU;oBACzB,OAAO,EAAE,CAAC;gBACZ,KAAK,WAAW,CAAC,YAAY,CAAC;gBAC9B,KAAK,WAAW,CAAC,qBAAqB,CAAC;gBACvC,KAAK,WAAW,CAAC,qBAAqB,CAAC;gBACvC;oBACE,OAAO,CAAC,CAAC;YACb,CAAC;QACH,CAAC;QACD,KAAK,mBAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;YACvB,QAAQ,IAAI,EAAE,CAAC;gBACb,KAAK,WAAW,CAAC,eAAe;oBAC9B,OAAO,EAAE,CAAC;gBACZ,KAAK,WAAW,CAAC,UAAU;oBACzB,OAAO,CAAC,CAAC;gBACX,KAAK,WAAW,CAAC,gBAAgB;oBAC/B,OAAO,CAAC,CAAC;gBACX;oBACE,OAAO,CAAC,CAAC;YACb,CAAC;QACH,CAAC;QACD,KAAK,mBAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;YAC1B,QAAQ,IAAI,EAAE,CAAC;gBACb,KAAK,WAAW,CAAC,sBAAsB;oBACrC,OAAO,CAAC,CAAC;gBACX,KAAK,WAAW,CAAC,UAAU;oBACzB,OAAO,CAAC,CAAC;gBACX;oBACE,OAAO,CAAC,CAAC;YACb,CAAC;QACH,CAAC;QACD,KAAK,mBAAQ,CAAC,YAAY,CAAC;QAC3B,OAAO,CAAC,CAAC,CAAC;YACR,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAlEW,QAAA,2CAA2C,+CAkEtD;AAEK,MAAM,+BAA+B,GAAG,CAAC,IAAY,EAAU,EAAE;IACtE,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,WAAW,CAAC,eAAe;YAC9B,OAAO,iCAAiC,CAAC;QAC3C,KAAK,WAAW,CAAC,gBAAgB;YAC/B,OAAO,iCAAiC,CAAC;QAC3C,KAAK,WAAW,CAAC,sBAAsB;YACrC,OAAO,2BAA2B,CAAC;QACrC;YACE,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;IAC9B,CAAC;AACH,CAAC,CAAC;AAXW,QAAA,+BAA+B,mCAW1C;AAEK,MAAM,gBAAgB,GAAG,CAAC,QAAgB,EAAE,IAAY,EAAE,EAAE;IAEjE,MAAM,QAAQ,GAAG;QACf,IAAI,EAAE;YACJ,IAAI,EAAE,IAAmB;YACzB,QAAQ,EAAE,IAAA,mCAA2B,EAAC,IAAI,CAAoB;YAC9D,YAAY,EAAE,IAAA,uCAA+B,EAAC,IAAI,CAAC;SACpD;QACD,IAAI,EAAE;YACJ,QAAQ,EAAE,QAAoB;YAC9B,IAAI,EAAE,EAAuB;YAC7B,GAAG,EAAE,SAAuC;YAC5C,GAAG,EAAE,SAAuC;YAC5C,QAAQ,EAAE,SAAuC;YACjD,gBAAgB,EAAE,EAAe;YACjC,mBAAmB,EAAE,EAAe;SACrC;KACF,CAAC;IACF,IAAI,QAAQ,KAAK,mBAAQ,CAAC,GAAG,IAAI,QAAQ,KAAK,mBAAQ,CAAC,aAAa,EAAE,CAAC;QACrE,QAAQ,CAAC,IAAI,CAAC,GAAG,GAAG,EAAC,IAAI,EAAE,IAAI,EAAC,CAAC;IACnC,CAAC;SAAM,CAAC;QACN,QAAQ,CAAC,IAAI,CAAC,GAAG,GAAG,EAAC,IAAI,EAAE,IAAI,EAAC,CAAC;IACnC,CAAC;IACD,MAAM,YAAY,GAAG,CAAC,GAAW,EAAE,KAAc,EAAE,EAAE;QACnD,QAAQ,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC5C,QAAQ,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC;IAClD,CAAC,CAAC;IAEF,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,WAAW,CAAC,sBAAsB;YACrC,YAAY,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;YAC/C,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,qCAAiB,CAAC,mBAAmB,CAAC;YAC3D,MAAM;QACR,KAAK,WAAW,CAAC,iCAAiC;YAChD,YAAY,CAAC,wBAAwB,EAAE,IAAI,CAAC,CAAC;YAC7C,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,qCAAiB,CAAC,aAAa,CAAC;YACrD,QAAQ,CAAC,IAAI,CAAC,QAAQ,GAAG,kCAAe,CAAC,QAAQ,CAAC;YAClD,MAAM;QACR,KAAK,WAAW,CAAC,6BAA6B;YAC5C,YAAY,CAAC,wBAAwB,EAAE,IAAI,CAAC,CAAC;YAC7C,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,qCAAiB,CAAC,aAAa,CAAC;YACrD,QAAQ,CAAC,IAAI,CAAC,QAAQ,GAAG,kCAAe,CAAC,IAAI,CAAC;YAC9C,MAAM;QACR,KAAK,WAAW,CAAC,+BAA+B;YAC9C,YAAY,CAAC,wBAAwB,EAAE,IAAI,CAAC,CAAC;YAC7C,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,qCAAiB,CAAC,aAAa,CAAC;YACrD,QAAQ,CAAC,IAAI,CAAC,QAAQ,GAAG,kCAAe,CAAC,MAAM,CAAC;YAChD,MAAM;QACR,KAAK,WAAW,CAAC,4BAA4B;YAC3C,YAAY,CAAC,wBAAwB,EAAE,IAAI,CAAC,CAAC;YAC7C,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,qCAAiB,CAAC,aAAa,CAAC;YACrD,QAAQ,CAAC,IAAI,CAAC,QAAQ,GAAG,kCAAe,CAAC,GAAG,CAAC;YAC7C,MAAM;QACR,KAAK,WAAW,CAAC,gBAAgB;YAC/B,YAAY,CAAC,wBAAwB,EAAE,IAAI,CAAC,CAAC;YAC7C,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,qCAAiB,CAAC,mBAAmB,CAAC;YAC3D,MAAM;QACR,KAAK,WAAW,CAAC,eAAe;YAC9B,YAAY,CAAC,+BAA+B,EAAE,IAAI,CAAC,CAAC;YACpD,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,qCAAiB,CAAC,eAAe,CAAC;YACvD,MAAM;QACR,KAAK,WAAW,CAAC,kBAAkB;YACjC,YAAY,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;YAC7C,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,qCAAiB,CAAC,UAAU,CAAC;YAClD,MAAM;QACR,KAAK,WAAW,CAAC,eAAe;YAC9B,YAAY,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC;YAC9C,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,qCAAiB,CAAC,UAAU,CAAC;YAClD,MAAM;QACR,KAAK,WAAW,CAAC,YAAY;YAC3B,YAAY,CAAC,4BAA4B,EAAE,IAAI,CAAC,CAAC;YACjD,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,qCAAiB,CAAC,gBAAgB,CAAC;YACxD,MAAM;QACR,KAAK,WAAW,CAAC,qBAAqB;YACpC,YAAY,CAAC,8BAA8B,EAAE,IAAI,CAAC,CAAC;YACnD,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,qCAAiB,CAAC,gBAAgB,CAAC;YACxD,MAAM;QACR,KAAK,WAAW,CAAC,qBAAqB;YACpC,YAAY,CAAC,oCAAoC,EAAE,IAAI,CAAC,CAAC;YACzD,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,qCAAiB,CAAC,gBAAgB,CAAC;YACxD,MAAM;QACR;YACE,MAAM;IACV,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC;AArFW,QAAA,gBAAgB,oBAqF3B"}
+{"version":3,"file":"findingKind.js","sourceRoot":"","sources":["../../../../src/dto/enums/findingKind.ts"],"names":[],"mappings":";;;AAAA,yCAAoC;AACpC,uDAAiD;AACjD,yDAAmD;AACnD,2DAAsD;AAEtD,IAAY,WAwBX;AAxBD,WAAY,WAAW;IACrB,MAAM;IACN,wCAAyB,CAAA;IAEzB,WAAW;IACX,kDAAmC,CAAA;IACnC,gDAAiC,CAAA;IACjC,4CAA6B,CAAA;IAC7B,8DAA+C,CAAA;IAC/C,8DAA+C,CAAA;IAE/C,WAAW;IACX,kDAAmC,CAAA;IACnC,oDAAqC,CAAA;IAErC,MAAM;IACN,wDAAyC,CAAA;IACzC,sFAAuE,CAAA;IACvE,8EAA+D,CAAA;IAC/D,kFAAmE,CAAA;IACnE,4EAA6D,CAAA;IAE7D,cAAc;IACd,gEAAiD,CAAA;AACnD,CAAC,EAxBW,WAAW,2BAAX,WAAW,QAwBtB;AAEM,MAAM,0BAA0B,GAAG,CAAC,IAAiB,EAAkB,EAAE;IAC9E,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,WAAW,CAAC,UAAU,CAAC;QAC5B,KAAK,WAAW,CAAC,eAAe,CAAC;QACjC,KAAK,WAAW,CAAC,cAAc,CAAC;QAChC,KAAK,WAAW,CAAC,gBAAgB,CAAC;QAClC,KAAK,WAAW,CAAC,kBAAkB,CAAC;QACpC,KAAK,WAAW,CAAC,iCAAiC,CAAC;QACnD,KAAK,WAAW,CAAC,6BAA6B,CAAC;QAC/C,KAAK,WAAW,CAAC,+BAA+B,CAAC;QACjD,KAAK,WAAW,CAAC,4BAA4B,CAAC;QAC9C,KAAK,WAAW,CAAC,sBAAsB,CAAC,CAAC,CAAC;YACxC,OAAO,gCAAc,CAAC,WAAW,CAAC;QACpC,CAAC;QACD,KAAK,WAAW,CAAC,YAAY,CAAC;QAC9B,KAAK,WAAW,CAAC,qBAAqB,CAAC;QACvC,KAAK,WAAW,CAAC,qBAAqB,CAAC,CAAC,CAAC;YACvC,OAAO,gCAAc,CAAC,SAAS,CAAC;QAClC,CAAC;QACD,KAAK,WAAW,CAAC,eAAe,CAAC,CAAC,CAAC;YACjC,OAAO,gCAAc,CAAC,SAAS,CAAC;QAClC,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,IAAI,KAAK,CAAC,sDAAsD,IAAI,EAAE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AA1BW,QAAA,0BAA0B,8BA0BrC;AAEK,MAAM,2BAA2B,GAAG,CAAC,QAAgB,EAAiB,EAAE;IAC7E,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,mBAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;YACvB,OAAO,CAAC,WAAW,CAAC,eAAe,EAAE,WAAW,CAAC,cAAc,EAAE,WAAW,CAAC,YAAY,EAAE,WAAW,CAAC,qBAAqB,EAAE,WAAW,CAAC,qBAAqB,CAAC,CAAC;QACnK,CAAC;QACD,KAAK,mBAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;YACvB,OAAO,CAAC,WAAW,CAAC,eAAe,EAAE,WAAW,CAAC,gBAAgB,CAAC,CAAC;QACrE,CAAC;QACD,KAAK,mBAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;YAClB,OAAO,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC;QAC1C,CAAC;QACD,KAAK,mBAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;YAC1B,OAAO,CAAC,WAAW,CAAC,sBAAsB,CAAC,CAAC;QAC9C,CAAC;QACD,KAAK,mBAAQ,CAAC,aAAa,CAAC,CAAC,CAAC;YAC5B,OAAO;gBACL,WAAW,CAAC,iCAAiC;gBAC7C,WAAW,CAAC,6BAA6B;gBACzC,WAAW,CAAC,+BAA+B;gBAC3C,WAAW,CAAC,4BAA4B;aACzC,CAAC;QACJ,CAAC;QACD,KAAK,mBAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;YAC3B,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACR,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AA7BW,QAAA,2BAA2B,+BA6BtC;AAEK,MAAM,2BAA2B,GAAG,CAAC,IAAY,EAA+B,EAAE;IACvF,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,WAAW,CAAC,YAAY,CAAC;QAC9B,KAAK,WAAW,CAAC,qBAAqB,CAAC;QACvC,KAAK,WAAW,CAAC,qBAAqB,CAAC;QACvC,KAAK,WAAW,CAAC,kBAAkB,CAAC;QACpC,KAAK,WAAW,CAAC,sBAAsB,CAAC;QACxC,KAAK,WAAW,CAAC,cAAc;YAC7B,OAAO,kCAAe,CAAC,IAAI,CAAC;QAC9B,KAAK,WAAW,CAAC,eAAe,CAAC;QACjC,KAAK,WAAW,CAAC,iCAAiC;YAChD,OAAO,kCAAe,CAAC,QAAQ,CAAC;QAClC,KAAK,WAAW,CAAC,6BAA6B;YAC5C,OAAO,kCAAe,CAAC,IAAI,CAAC;QAC9B,KAAK,WAAW,CAAC,+BAA+B;YAC9C,OAAO,kCAAe,CAAC,MAAM,CAAC;QAChC,KAAK,WAAW,CAAC,4BAA4B;YAC3C,OAAO,kCAAe,CAAC,GAAG,CAAC;QAC7B,KAAK,WAAW,CAAC,eAAe,CAAC;QACjC,KAAK,WAAW,CAAC,gBAAgB;YAC/B,OAAO,kCAAe,CAAC,MAAM,CAAC;QAChC;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC,CAAC;AAxBW,QAAA,2BAA2B,+BAwBtC;AAEF,iGAAiG;AAC1F,MAAM,2CAA2C,GAAG,CAAC,QAAkB,EAAE,IAAY,EAAU,EAAE;IACtG,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,mBAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;YAClB,QAAQ,IAAI,EAAE,CAAC;gBACb,KAAK,WAAW,CAAC,kBAAkB;oBACjC,OAAO,EAAE,CAAC;gBACZ;oBACE,OAAO,CAAC,CAAC;YACb,CAAC;QACH,CAAC;QACD,KAAK,mBAAQ,CAAC,aAAa,CAAC,CAAC,CAAC;YAC5B,QAAQ,IAAI,EAAE,CAAC;gBACb,KAAK,WAAW,CAAC,kBAAkB;oBACjC,OAAO,EAAE,CAAC;gBACZ,KAAK,WAAW,CAAC,iCAAiC;oBAChD,OAAO,EAAE,CAAC;gBACZ,KAAK,WAAW,CAAC,6BAA6B;oBAC5C,OAAO,CAAC,CAAC;gBACX,KAAK,WAAW,CAAC,+BAA+B;oBAC9C,OAAO,CAAC,CAAC;gBACX,KAAK,WAAW,CAAC,4BAA4B;oBAC3C,OAAO,CAAC,CAAC;gBACX;oBACE,OAAO,CAAC,CAAC;YACb,CAAC;QACH,CAAC;QACD,KAAK,mBAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;YACvB,QAAQ,IAAI,EAAE,CAAC;gBACb,KAAK,WAAW,CAAC,eAAe;oBAC9B,OAAO,EAAE,CAAC;gBACZ,KAAK,WAAW,CAAC,cAAc;oBAC7B,OAAO,CAAC,CAAC;gBACX,KAAK,WAAW,CAAC,UAAU;oBACzB,OAAO,EAAE,CAAC;gBACZ,KAAK,WAAW,CAAC,YAAY,CAAC;gBAC9B,KAAK,WAAW,CAAC,qBAAqB,CAAC;gBACvC,KAAK,WAAW,CAAC,qBAAqB,CAAC;gBACvC;oBACE,OAAO,CAAC,CAAC;YACb,CAAC;QACH,CAAC;QACD,KAAK,mBAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;YACvB,QAAQ,IAAI,EAAE,CAAC;gBACb,KAAK,WAAW,CAAC,eAAe;oBAC9B,OAAO,EAAE,CAAC;gBACZ,KAAK,WAAW,CAAC,UAAU;oBACzB,OAAO,CAAC,CAAC;gBACX,KAAK,WAAW,CAAC,gBAAgB;oBAC/B,OAAO,CAAC,CAAC;gBACX;oBACE,OAAO,CAAC,CAAC;YACb,CAAC;QACH,CAAC;QACD,KAAK,mBAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;YAC1B,QAAQ,IAAI,EAAE,CAAC;gBACb,KAAK,WAAW,CAAC,sBAAsB;oBACrC,OAAO,CAAC,CAAC;gBACX,KAAK,WAAW,CAAC,UAAU;oBACzB,OAAO,CAAC,CAAC;gBACX;oBACE,OAAO,CAAC,CAAC;YACb,CAAC;QACH,CAAC;QACD,KAAK,mBAAQ,CAAC,YAAY,CAAC;QAC3B,OAAO,CAAC,CAAC,CAAC;YACR,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AApEW,QAAA,2CAA2C,+CAoEtD;AAEK,MAAM,+BAA+B,GAAG,CAAC,IAAY,EAAU,EAAE;IACtE,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,WAAW,CAAC,eAAe;YAC9B,OAAO,iCAAiC,CAAC;QAC3C,KAAK,WAAW,CAAC,gBAAgB;YAC/B,OAAO,iCAAiC,CAAC;QAC3C,KAAK,WAAW,CAAC,sBAAsB;YACrC,OAAO,2BAA2B,CAAC;QACrC;YACE,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;IAC9B,CAAC;AACH,CAAC,CAAC;AAXW,QAAA,+BAA+B,mCAW1C;AAEK,MAAM,gBAAgB,GAAG,CAAC,QAAgB,EAAE,IAAY,EAAE,EAAE;IAEjE,MAAM,QAAQ,GAAG;QACf,IAAI,EAAE;YACJ,IAAI,EAAE,IAAmB;YACzB,QAAQ,EAAE,IAAA,mCAA2B,EAAC,IAAI,CAAoB;YAC9D,YAAY,EAAE,IAAA,uCAA+B,EAAC,IAAI,CAAC;SACpD;QACD,IAAI,EAAE;YACJ,QAAQ,EAAE,QAAoB;YAC9B,IAAI,EAAE,EAAuB;YAC7B,GAAG,EAAE,SAAuC;YAC5C,GAAG,EAAE,SAAuC;YAC5C,QAAQ,EAAE,SAAuC;YACjD,gBAAgB,EAAE,EAAe;YACjC,mBAAmB,EAAE,EAAe;SACrC;KACF,CAAC;IACF,IAAI,QAAQ,KAAK,mBAAQ,CAAC,GAAG,IAAI,QAAQ,KAAK,mBAAQ,CAAC,aAAa,EAAE,CAAC;QACrE,QAAQ,CAAC,IAAI,CAAC,GAAG,GAAG,EAAC,IAAI,EAAE,IAAI,EAAC,CAAC;IACnC,CAAC;SAAM,CAAC;QACN,QAAQ,CAAC,IAAI,CAAC,GAAG,GAAG,EAAC,IAAI,EAAE,IAAI,EAAC,CAAC;IACnC,CAAC;IACD,MAAM,YAAY,GAAG,CAAC,GAAW,EAAE,KAAc,EAAE,EAAE;QACnD,QAAQ,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC5C,QAAQ,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC;IAClD,CAAC,CAAC;IAEF,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,WAAW,CAAC,sBAAsB;YACrC,YAAY,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;YAC/C,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,qCAAiB,CAAC,mBAAmB,CAAC;YAC3D,MAAM;QACR,KAAK,WAAW,CAAC,iCAAiC;YAChD,YAAY,CAAC,wBAAwB,EAAE,IAAI,CAAC,CAAC;YAC7C,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,qCAAiB,CAAC,aAAa,CAAC;YACrD,QAAQ,CAAC,IAAI,CAAC,QAAQ,GAAG,kCAAe,CAAC,QAAQ,CAAC;YAClD,MAAM;QACR,KAAK,WAAW,CAAC,6BAA6B;YAC5C,YAAY,CAAC,wBAAwB,EAAE,IAAI,CAAC,CAAC;YAC7C,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,qCAAiB,CAAC,aAAa,CAAC;YACrD,QAAQ,CAAC,IAAI,CAAC,QAAQ,GAAG,kCAAe,CAAC,IAAI,CAAC;YAC9C,MAAM;QACR,KAAK,WAAW,CAAC,+BAA+B;YAC9C,YAAY,CAAC,wBAAwB,EAAE,IAAI,CAAC,CAAC;YAC7C,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,qCAAiB,CAAC,aAAa,CAAC;YACrD,QAAQ,CAAC,IAAI,CAAC,QAAQ,GAAG,kCAAe,CAAC,MAAM,CAAC;YAChD,MAAM;QACR,KAAK,WAAW,CAAC,4BAA4B;YAC3C,YAAY,CAAC,wBAAwB,EAAE,IAAI,CAAC,CAAC;YAC7C,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,qCAAiB,CAAC,aAAa,CAAC;YACrD,QAAQ,CAAC,IAAI,CAAC,QAAQ,GAAG,kCAAe,CAAC,GAAG,CAAC;YAC7C,MAAM;QACR,KAAK,WAAW,CAAC,gBAAgB;YAC/B,YAAY,CAAC,wBAAwB,EAAE,IAAI,CAAC,CAAC;YAC7C,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,qCAAiB,CAAC,mBAAmB,CAAC;YAC3D,MAAM;QACR,KAAK,WAAW,CAAC,eAAe;YAC9B,YAAY,CAAC,+BAA+B,EAAE,IAAI,CAAC,CAAC;YACpD,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,qCAAiB,CAAC,eAAe,CAAC;YACvD,MAAM;QACR,KAAK,WAAW,CAAC,kBAAkB;YACjC,YAAY,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;YAC7C,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,qCAAiB,CAAC,UAAU,CAAC;YAClD,MAAM;QACR,KAAK,WAAW,CAAC,eAAe;YAC9B,YAAY,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC;YAC9C,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,qCAAiB,CAAC,UAAU,CAAC;YAClD,MAAM;QACR,KAAK,WAAW,CAAC,cAAc;YAC7B,YAAY,CAAC,mCAAmC,EAAE,IAAI,CAAC,CAAC;YACxD,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,qCAAiB,CAAC,UAAU,CAAC;YAClD,MAAM;QACR,KAAK,WAAW,CAAC,YAAY;YAC3B,YAAY,CAAC,4BAA4B,EAAE,IAAI,CAAC,CAAC;YACjD,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,qCAAiB,CAAC,gBAAgB,CAAC;YACxD,MAAM;QACR,KAAK,WAAW,CAAC,qBAAqB;YACpC,YAAY,CAAC,8BAA8B,EAAE,IAAI,CAAC,CAAC;YACnD,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,qCAAiB,CAAC,gBAAgB,CAAC;YACxD,MAAM;QACR,KAAK,WAAW,CAAC,qBAAqB;YACpC,YAAY,CAAC,oCAAoC,EAAE,IAAI,CAAC,CAAC;YACzD,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,qCAAiB,CAAC,gBAAgB,CAAC;YACxD,MAAM;QACR;YACE,MAAM;IACV,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC;AAzFW,QAAA,gBAAgB,oBAyF3B"}

package/build/src/dto/index.d.ts

@@ -8,6 +8,7 @@ export * from './coverage.dto';
 export * from './customActions.dto';
 export * from './customScores.dto';
 export * from './defaultConnector.dto';
+export * from './eng';
 export * from './entityIdSummaries.dto';
 export * from './enum.dto';
 export * from './enums';

package/build/src/dto/index.js

@@ -24,6 +24,7 @@ __exportStar(require("./coverage.dto"), exports);
 __exportStar(require("./customActions.dto"), exports);
 __exportStar(require("./customScores.dto"), exports);
 __exportStar(require("./defaultConnector.dto"), exports);
+__exportStar(require("./eng"), exports);
 __exportStar(require("./entityIdSummaries.dto"), exports);
 __exportStar(require("./enum.dto"), exports);
 __exportStar(require("./enums"), exports);

package/build/src/dto/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/dto/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,+CAA6B;AAC7B,+CAA6B;AAC7B,8CAA4B;AAC5B,6CAA2B;AAC3B,mDAAiC;AACjC,8CAA4B;AAC5B,iDAA+B;AAC/B,sDAAoC;AACpC,qDAAmC;AACnC,yDAAuC;AACvC,0DAAwC;AACxC,6CAA2B;AAC3B,0CAAwB;AACxB,kDAAgC;AAChC,iDAA+B;AAC/B,yDAAuC;AACvC,8CAA4B;AAC5B,wCAAsB;AACtB,gDAA8B;AAC9B,qDAAmC;AACnC,6CAA2B;AAC3B,6CAA2B;AAC3B,kDAAgC;AAChC,sDAAoC;AACpC,yDAAuC;AACvC,mDAAiC;AACjC,uDAAqC;AACrC,kDAAgC;AAChC,mDAAiC;AACjC,gDAA8B;AAC9B,+CAA6B;AAC7B,8CAA4B;AAC5B,sDAAoC;AACpC,+CAA6B;AAC7B,wDAAsC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/dto/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,+CAA6B;AAC7B,+CAA6B;AAC7B,8CAA4B;AAC5B,6CAA2B;AAC3B,mDAAiC;AACjC,8CAA4B;AAC5B,iDAA+B;AAC/B,sDAAoC;AACpC,qDAAmC;AACnC,yDAAuC;AACvC,wCAAsB;AACtB,0DAAwC;AACxC,6CAA2B;AAC3B,0CAAwB;AACxB,kDAAgC;AAChC,iDAA+B;AAC/B,yDAAuC;AACvC,8CAA4B;AAC5B,wCAAsB;AACtB,gDAA8B;AAC9B,qDAAmC;AACnC,6CAA2B;AAC3B,6CAA2B;AAC3B,kDAAgC;AAChC,sDAAoC;AACpC,yDAAuC;AACvC,mDAAiC;AACjC,uDAAqC;AACrC,kDAAgC;AAChC,mDAAiC;AACjC,gDAA8B;AAC9B,+CAA6B;AAC7B,8CAA4B;AAC5B,sDAAoC;AACpC,+CAA6B;AAC7B,wDAAsC"}

package/build/src/dto/saasComponents.dto.d.ts

@@ -63,6 +63,8 @@ export type RawFindingsContext = {
     hasProdAccess?: boolean;
     hasPrivilegedAccess?: boolean;
     discoveredAt?: string;
+    hasInsecureFactors?: boolean;
+    inSecureFactors?: String[];
 };
 export type SaasComponentMeta = {
     _findings: RawFindingsContext;

package/build/src/dto/saasUsers.dto.d.ts

@@ -21,6 +21,7 @@ export declare const _MfaFactorDto: z.ZodObject<{
     factorType: z.ZodOptional<z.ZodString>;
     secure: z.ZodOptional<z.ZodEnum<["SECURE", "INSECURE", "UNKNOWN", "MISSING"]>>;
 }, z.ZodString, "strip">>;
+export declare const getMfaFactorSecurityLevel: (factor?: string, status?: string) => MfaRating;
 export declare const _SaasUserMeta: z.ZodObject<{
     _user: z.ZodObject<{
         /** User ID from provider */

package/build/src/dto/saasUsers.dto.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports._SaasUserDto = exports._SaasUserUpsertDto = exports._SaasUserMeta = exports._MfaFactorDto = exports._MfaRating = void 0;
+exports._SaasUserDto = exports._SaasUserUpsertDto = exports._SaasUserMeta = exports.getMfaFactorSecurityLevel = exports._MfaFactorDto = exports._MfaRating = void 0;
 const zod_1 = require("zod");
 const base_dto_1 = require("./base.dto");
 const enums_1 = require("./enums");
@@ -15,6 +15,33 @@ exports._MfaFactorDto = zod_1.z
     secure: exports._MfaRating.optional(),
 })
     .catchall(zod_1.z.string());
+const getMfaFactorSecurityLevel = (factor, status) => {
+    if (!factor || status !== 'ACTIVE')
+        return 'MISSING';
+    switch (factor.toLowerCase()) {
+        // OKTA - https://developer.okta.com/docs/reference/api/factors/#factor-type
+        case 'push':
+        case 'signed_nonce':
+        case 'token:hotp':
+        case 'token:software:totp':
+        case 'token':
+        case 'u2f':
+        case 'web':
+        case 'webauthn':
+            return 'SECURE';
+        // OKTA - https://developer.okta.com/docs/reference/api/factors/#factor-type
+        case 'sms':
+        case 'call':
+        case 'email':
+        case 'question':
+        case 'token:hardware': {
+            return 'INSECURE';
+        }
+        default:
+            return 'UNKNOWN';
+    }
+};
+exports.getMfaFactorSecurityLevel = getMfaFactorSecurityLevel;
 exports._SaasUserMeta = zod_1.z.object({
     _user: zod_1.z.object({
         /** User ID from provider */

package/build/src/dto/saasUsers.dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"saasUsers.dto.js","sourceRoot":"","sources":["../../../src/dto/saasUsers.dto.ts"],"names":[],"mappings":";;;AAAA,6BAAsB;AACtB,yCAAkE;AAClE,mCAAuC;AAE1B,QAAA,UAAU,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;AAE/E,iEAAiE;AACpD,QAAA,aAAa,GAAG,OAAC;KAC3B,MAAM,CAAC;IACN,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,MAAM,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC7D,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,MAAM,EAAE,kBAAU,CAAC,QAAQ,EAAE;CAC9B,CAAC;KACD,QAAQ,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AAEX,QAAA,aAAa,GAAG,OAAC,CAAC,MAAM,CAAC;IACpC,KAAK,EAAE,OAAC,CAAC,MAAM,CAAC;QACd,4BAA4B;QAC5B,KAAK,EAAE,OAAC,CAAC,QAAQ,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC;QAC7B,+BAA+B;QAC/B,MAAM,EAAE,OAAC,CAAC,QAAQ,CAAC,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACpD,yBAAyB;QACzB,OAAO,EAAE,OAAC,CAAC,QAAQ,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC;QAC/B,gCAAgC;QAChC,gBAAgB,EAAE,OAAC,CAAC,QAAQ,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC;QACxC,qBAAqB;QACrB,OAAO,EAAE,OAAC,CAAC,QAAQ,CAAC,OAAC,CAAC,KAAK,CAAC,qBAAa,CAAC,CAAC;QAC3C,mCAAmC;QACnC,OAAO,EAAE,OAAC,CAAC,MAAM,CAAC;YAChB,wBAAwB;YACxB,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE;YACrB,uBAAuB;YACvB,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE;YACpB,mBAAmB;YACnB,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE;YACjB,mBAAmB;YACnB,KAAK,EAAE,OAAC,CAAC,QAAQ,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC;YAC7B,wBAAwB;YACxB,UAAU,EAAE,OAAC,CAAC,QAAQ,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC;YAClC,0BAA0B;YAC1B,YAAY,EAAE,OAAC,CAAC,QAAQ,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC;YACpC,iCAAiC;YACjC,UAAU,EAAE,OAAC,CAAC,QAAQ,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC;YAClC,wBAAwB;YACxB,SAAS,EAAE,OAAC,CAAC,QAAQ,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC;YACjC,qBAAqB;YACrB,OAAO,EAAE,OAAC;iBACP,MAAM,CAAC;gBACN,0BAA0B;gBAC1B,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;gBAC5B,4BAA4B;gBAC5B,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;gBAC3B,6BAA6B;gBAC7B,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;aAC7B,CAAC;iBACD,QAAQ,EAAE;YACb,kBAAkB;YAClB,QAAQ,EAAE,OAAC,CAAC,UAAU,CAAC,sBAAc,CAAC;SACvC,CAAC;KACH,CAAC;IACF,IAAI,EAAE,OAAC,CAAC,OAAO,EAAE;CAClB,CAAC,CAAC;AAIU,QAAA,kBAAkB,GAAG,gCAAqB,CAAC,KAAK,CAC3D,OAAC,CAAC,MAAM,CAAC;IACP,cAAc;IACd,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE;IACf,mBAAmB;IACnB,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE;IACf,qBAAqB;IACrB,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE;IACjB,kBAAkB;IAClB,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE;IACjB,wDAAwD;IACxD,IAAI,EAAE,qBAAa;CACpB,CAAC,CACH,CAAC;AAIW,QAAA,YAAY,GAAG,0BAAkB,CAAC,KAAK,CAAC,0BAAe,CAAC,CAAC"}
+{"version":3,"file":"saasUsers.dto.js","sourceRoot":"","sources":["../../../src/dto/saasUsers.dto.ts"],"names":[],"mappings":";;;AAAA,6BAAsB;AACtB,yCAAkE;AAClE,mCAAuC;AAE1B,QAAA,UAAU,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;AAE/E,iEAAiE;AACpD,QAAA,aAAa,GAAG,OAAC;KAC3B,MAAM,CAAC;IACN,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,MAAM,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC7D,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,MAAM,EAAE,kBAAU,CAAC,QAAQ,EAAE;CAC9B,CAAC;KACD,QAAQ,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AAEjB,MAAM,yBAAyB,GAAG,CAAC,MAAe,EAAE,MAAe,EAAa,EAAE;IACvF,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACrD,QAAQ,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;QAC7B,4EAA4E;QAC5E,KAAK,MAAM,CAAC;QACZ,KAAK,cAAc,CAAC;QACpB,KAAK,YAAY,CAAC;QAClB,KAAK,qBAAqB,CAAC;QAC3B,KAAK,OAAO,CAAC;QACb,KAAK,KAAK,CAAC;QACX,KAAK,KAAK,CAAC;QACX,KAAK,UAAU;YACb,OAAO,QAAQ,CAAC;QAClB,4EAA4E;QAC5E,KAAK,KAAK,CAAC;QACX,KAAK,MAAM,CAAC;QACZ,KAAK,OAAO,CAAC;QACb,KAAK,UAAU,CAAC;QAChB,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACtB,OAAO,UAAU,CAAC;QACpB,CAAC;QACD;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC,CAAC;AAxBW,QAAA,yBAAyB,6BAwBpC;AAEW,QAAA,aAAa,GAAG,OAAC,CAAC,MAAM,CAAC;IACpC,KAAK,EAAE,OAAC,CAAC,MAAM,CAAC;QACd,4BAA4B;QAC5B,KAAK,EAAE,OAAC,CAAC,QAAQ,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC;QAC7B,+BAA+B;QAC/B,MAAM,EAAE,OAAC,CAAC,QAAQ,CAAC,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACpD,yBAAyB;QACzB,OAAO,EAAE,OAAC,CAAC,QAAQ,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC;QAC/B,gCAAgC;QAChC,gBAAgB,EAAE,OAAC,CAAC,QAAQ,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC;QACxC,qBAAqB;QACrB,OAAO,EAAE,OAAC,CAAC,QAAQ,CAAC,OAAC,CAAC,KAAK,CAAC,qBAAa,CAAC,CAAC;QAC3C,mCAAmC;QACnC,OAAO,EAAE,OAAC,CAAC,MAAM,CAAC;YAChB,wBAAwB;YACxB,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE;YACrB,uBAAuB;YACvB,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE;YACpB,mBAAmB;YACnB,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE;YACjB,mBAAmB;YACnB,KAAK,EAAE,OAAC,CAAC,QAAQ,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC;YAC7B,wBAAwB;YACxB,UAAU,EAAE,OAAC,CAAC,QAAQ,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC;YAClC,0BAA0B;YAC1B,YAAY,EAAE,OAAC,CAAC,QAAQ,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC;YACpC,iCAAiC;YACjC,UAAU,EAAE,OAAC,CAAC,QAAQ,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC;YAClC,wBAAwB;YACxB,SAAS,EAAE,OAAC,CAAC,QAAQ,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC;YACjC,qBAAqB;YACrB,OAAO,EAAE,OAAC;iBACP,MAAM,CAAC;gBACN,0BAA0B;gBAC1B,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;gBAC5B,4BAA4B;gBAC5B,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;gBAC3B,6BAA6B;gBAC7B,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;aAC7B,CAAC;iBACD,QAAQ,EAAE;YACb,kBAAkB;YAClB,QAAQ,EAAE,OAAC,CAAC,UAAU,CAAC,sBAAc,CAAC;SACvC,CAAC;KACH,CAAC;IACF,IAAI,EAAE,OAAC,CAAC,OAAO,EAAE;CAClB,CAAC,CAAC;AAIU,QAAA,kBAAkB,GAAG,gCAAqB,CAAC,KAAK,CAC3D,OAAC,CAAC,MAAM,CAAC;IACP,cAAc;IACd,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE;IACf,mBAAmB;IACnB,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE;IACf,qBAAqB;IACrB,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE;IACjB,kBAAkB;IAClB,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE;IACjB,wDAAwD;IACxD,IAAI,EAAE,qBAAa;CACpB,CAAC,CACH,CAAC;AAIW,QAAA,YAAY,GAAG,0BAAkB,CAAC,KAAK,CAAC,0BAAe,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ampsec/platform-client",
-  "version": "68.2.0",
+  "version": "68.4.0",
   "description": "",
   "main": "build/src/index.js",
   "runkitExampleFilename": "example/main.js",

package/src/dto/eng/coverage.dto.ts

@@ -0,0 +1,50 @@
+import {z} from 'zod';
+import {_MfaFactorDto, _MfaRating} from '../saasUsers.dto';
+
+export enum AssetDomainStatus {
+  SECURE = 'SECURE',
+  INSECURE = 'INSECURE',
+  MISSING = 'MISSING',
+}
+
+export const _EndUserDeviceReportDto = z.object({
+  aid: z.string(),
+  displayValue: z.string(),
+  hostname: z.string().optional(),
+  os: z.string().optional(),
+  sn: z.string().optional(),
+  hasEndpointManagement: z.nativeEnum(AssetDomainStatus),
+  hasEndpointSecurity: z.nativeEnum(AssetDomainStatus),
+  hasVulnManagement: z.nativeEnum(AssetDomainStatus),
+});
+export type EndUserDeviceReportDto = z.infer<typeof _EndUserDeviceReportDto>;
+
+export const _EndUserCoverageReportDto = z.object({
+  uid: z.string(),
+  score: z.number(),
+  mfa: z.object({
+    allowEmptyFactors: z.boolean(),
+    enabled: z.boolean(),
+    rating: _MfaRating,
+    factors: _MfaFactorDto.array(),
+  }),
+  training: z.object({
+    hasAccount: z.boolean(),
+    overdue: z.number(),
+  }),
+  devices: z.object({
+    rating: z.nativeEnum(AssetDomainStatus),
+    allMonitored: z.boolean(),
+    hasInactive: z.boolean(),
+    hasMissing: z.boolean(),
+    assets: _EndUserDeviceReportDto.array(),
+  }),
+  vulns: z.object({
+    totalOpen: z.number(),
+    criticalOpen: z.number(),
+    highOpen: z.number(),
+    mediumOpen: z.number(),
+    lowOpen: z.number(),
+  }),
+});
+export type EndUserCoverageReportDto = z.infer<typeof _EndUserCoverageReportDto>;

package/src/dto/eng/index.ts

@@ -0,0 +1 @@
+export * from './coverage.dto';

package/src/dto/enums/category.ts

@@ -1,5 +1,7 @@
 export enum Category {
   EDR = 'EDR',
+  ENDPOINT_MANAGEMENT = 'ENDPOINT_MANAGEMENT',
+  ENDPOINT_SECURITY = 'ENDPOINT_SECURITY',
   VULNERABILITY = 'VULNERABILITY',
   /**
    * @deprecated Use IDENTITY instead

package/src/dto/enums/findingKind.ts

@@ -9,6 +9,7 @@ export enum FindingKind {
 
   // IDENTITY
   MFA_NOT_ENABLED = 'MFA_NOT_ENABLED',
+  MFA_NOT_SECURE = 'MFA_NOT_SECURE',
   IS_EXECUTIVE = 'IS_EXECUTIVE',
   HAS_PRODUCTION_ACCESS = 'HAS_PRODUCTION_ACCESS',
   HAS_PRIVILEGED_ACCESS = 'HAS_PRIVILEGED_ACCESS',
@@ -32,6 +33,7 @@ export const lookupFindingOutcomeByKind = (kind: FindingKind): FindingOutcome =>
   switch (kind) {
     case FindingKind.NO_ACCOUNT:
     case FindingKind.MFA_NOT_ENABLED:
+    case FindingKind.MFA_NOT_SECURE:
     case FindingKind.TRAINING_OVERDUE:
     case FindingKind.DEVICE_NOT_MANAGED:
     case FindingKind.CRITICAL_VULNERABILITY_OUT_OF_SLA:
@@ -58,7 +60,7 @@ export const lookupFindingOutcomeByKind = (kind: FindingKind): FindingOutcome =>
 export const lookupFindingKindByCategory = (category: string): FindingKind[] => {
   switch (category) {
     case Category.IDENTITY: {
-      return [FindingKind.MFA_NOT_ENABLED, FindingKind.IS_EXECUTIVE, FindingKind.HAS_PRODUCTION_ACCESS, FindingKind.HAS_PRIVILEGED_ACCESS];
+      return [FindingKind.MFA_NOT_ENABLED, FindingKind.MFA_NOT_SECURE, FindingKind.IS_EXECUTIVE, FindingKind.HAS_PRODUCTION_ACCESS, FindingKind.HAS_PRIVILEGED_ACCESS];
     }
     case Category.TRAINING: {
       return [FindingKind.FAILED_PHISHING, FindingKind.TRAINING_OVERDUE];
@@ -93,6 +95,7 @@ export const lookupFindingSeverityByKind = (kind: string): FindingSeverity | und
     case FindingKind.HAS_PRIVILEGED_ACCESS:
     case FindingKind.DEVICE_NOT_MANAGED:
     case FindingKind.WEB_GATEWAY_NOT_ACTIVE:
+    case FindingKind.MFA_NOT_SECURE:
       return FindingSeverity.HIGH;
     case FindingKind.MFA_NOT_ENABLED:
     case FindingKind.CRITICAL_VULNERABILITY_OUT_OF_SLA:
@@ -142,6 +145,8 @@ export const lookupFindingScoreByCategoryKindAndSeverity = (category: Category,
       switch (kind) {
         case FindingKind.MFA_NOT_ENABLED:
           return 12;
+        case FindingKind.MFA_NOT_SECURE:
+          return 5;
         case FindingKind.NO_ACCOUNT:
           return 12;
         case FindingKind.IS_EXECUTIVE:
@@ -262,6 +267,10 @@ export const generateInsights = (category: string, kind: string) => {
       setCondition('meta._findings.enabled', false);
       insights.rule.kind = SaasComponentKind.MFA_CONFIG;
       break;
+    case FindingKind.MFA_NOT_SECURE:
+      setCondition('meta._findings.hasInsecureFactors', true);
+      insights.rule.kind = SaasComponentKind.MFA_CONFIG;
+      break;
     case FindingKind.IS_EXECUTIVE:
       setCondition('meta._findings.isExecutive', true);
       insights.rule.kind = SaasComponentKind.GROUP_MEMBERSHIP;

package/src/dto/index.ts

@@ -8,6 +8,7 @@ export * from './coverage.dto';
 export * from './customActions.dto';
 export * from './customScores.dto';
 export * from './defaultConnector.dto';
+export * from './eng';
 export * from './entityIdSummaries.dto';
 export * from './enum.dto';
 export * from './enums';

package/src/dto/saasComponents.dto.ts

@@ -70,6 +70,8 @@ export type RawFindingsContext = {
   hasProdAccess?: boolean;
   hasPrivilegedAccess?: boolean;
   discoveredAt?: string;
+  hasInsecureFactors?: boolean;
+  inSecureFactors?: String[];
 };
 
 export type SaasComponentMeta = {

package/src/dto/saasUsers.dto.ts

@@ -15,6 +15,32 @@ export const _MfaFactorDto = z
   })
   .catchall(z.string());
 
+export const getMfaFactorSecurityLevel = (factor?: string, status?: string): MfaRating => {
+  if (!factor || status !== 'ACTIVE') return 'MISSING';
+  switch (factor.toLowerCase()) {
+    // OKTA - https://developer.okta.com/docs/reference/api/factors/#factor-type
+    case 'push':
+    case 'signed_nonce':
+    case 'token:hotp':
+    case 'token:software:totp':
+    case 'token':
+    case 'u2f':
+    case 'web':
+    case 'webauthn':
+      return 'SECURE';
+    // OKTA - https://developer.okta.com/docs/reference/api/factors/#factor-type
+    case 'sms':
+    case 'call':
+    case 'email':
+    case 'question':
+    case 'token:hardware': {
+      return 'INSECURE';
+    }
+    default:
+      return 'UNKNOWN';
+  }
+};
+
 export const _SaasUserMeta = z.object({
   _user: z.object({
     /** User ID from provider */