@cccsaurora/howler-ui 2.14.0-dev.271 → 2.14.0-dev.273

package/README.fr.md

@@ -0,0 +1,39 @@
+# Howler : Triage optimisé
+
+Améliorez l'efficacité de votre centre d'opérations de sécurité avec Howler, la plateforme de triage des alertes de pointe conçue pour répondre aux exigences actuelles des centres d'opérations de sécurité.
+
+## 🚀 Donnez du pouvoir à vos analystes
+
+Howler permet aux analystes de triage et aux ingénieurs de détection d'en faire plus en affinant et en accélérant la réponse aux incidents grâce à une multitude de fonctionnalités modernes.
+
+- **💨 Triage rationalisé des alertes:** Utilisez des modèles de cartes d'alerte personnalisables pour une évaluation rapide et cohérente.
+
+- **☑ Schéma normalisé:** Examinez les alertes conformes au Elastic Common Schema pour une comparaison plus facile et des évaluations plus précises.
+
+- **📁 Automatisation basée sur des filtres:** Mettez en œuvre une automatisation basée sur des filtres pour éliminer les tâches de routine et vous concentrer sur l'analyse stratégique.
+
+- **📝 Automatisation basée sur des règles:** Utilisez Elastic Query Language ou les formats de règles Sigma pour automatiser.
+
+- **🧠 Regroupement intelligent des alertes:** Gérez efficacement les menaces grâce à un système de regroupement intuitif qui fournit un contexte et accélère la résolution.
+
+- **🛠 Intégration transparente des outils:** Améliorez votre écosystème de sécurité grâce à l'intégration sans effort d'outils externes essentiels.
+
+## Documentation
+
+Pour la documentation, voir <https://cybercentrecanada.github.io/howler-docs/fr>
+
+## Contribution
+
+### Développement
+
+Si vous souhaitez contribuer à Howler, suivez le [guide du développeur] (<https://cybercentrecanada.github.io/howler-docs/developer/getting_started/>), créez une branche et commencez à coder !
+
+### Signalement de problèmes
+
+Si vous souhaitez signaler un problème, nous suivrons les problèmes pour chaque composant dans leurs dépôts respectifs :
+
+- [Howler UI](https://github.com/CybercentreCanada/howler-ui/issues/new)
+- [Howler API](https://github.com/CybercentreCanada/howler-api/issues/new)
+- [Howler Client](https://github.com/CybercentreCanada/howler-client/issues/new)
+
+Veuillez ne pas créer de problèmes dans ce dépôt - il est expressément utilisé comme une page d'atterrissage pour ceux qui sont intéressés par les bases de code de Howler.

package/README.md

@@ -0,0 +1,29 @@
+# Howler: Triage Optimized
+
+Elevate your Security Operations Center's efficiency with Howler, the cutting-edge alert triage platform tailored for today's SOC demands.
+
+## 🚀 Empower Your Analysts
+
+Howler allows triage analysts and detection engineers to do more by refining and expediting incident response through a host of modern features.
+
+- **💨 Streamlined Alert Triage**: Utilize customizable alert card templates for quick and consistent evaluation.
+
+- **☑ Standardized Schema**: Review alerts conforming to the Elastic Common Schema for easier comparison and more accurate assessments.
+
+- **📁 Filter-based automation**: Implement filter-driven automation to eliminate routine tasks and focus on strategic analysis.
+
+- **📝 Rule-based automation**: Use Elastic Query Language or Sigma rule formats to automate.
+
+- **🧠 Intelligent Alert Grouping**: Efficiently manage threats with an intuitive bundling system that provides context and speeds up resolution.
+
+- **🛠 Seamless Tool Integration**: Enhance your security ecosystem with effortless integration of essential external tools.
+
+## Documentation
+
+For documentation, see <https://cybercentrecanada.github.io/howler-docs/>
+
+## Contributing
+
+### Development
+
+If you'd like to contribute to Howler, follow the [developer's guide](https://cybercentrecanada.github.io/howler-docs/developer/getting_started/), create a branch and get coding!

package/models/ActionTypes.d.ts

@@ -0,0 +1,50 @@
+import type { Operation } from './entities/generated/Operation';
+
+export interface ActionOperationStep {
+  args: {
+    [index: string]: string[];
+  };
+  options: {
+    [index: string]: string[] | { [index: string]: string[] };
+  };
+  validation: {
+    warn?: {
+      query: string;
+      message?: string;
+    };
+    error?: {
+      query: string;
+      message?: string;
+    };
+  };
+}
+
+export interface ActionOperation {
+  id: string;
+  title: string;
+  i18nKey: string;
+  description: {
+    short: string;
+    long: string;
+  };
+  roles: string[];
+  steps: ActionOperationStep[];
+  triggers: string[];
+  priority?: number;
+}
+
+export interface ActionRequest {
+  request_id: string;
+  action_id?: string;
+  query?: string;
+  operations?: Operation[];
+}
+
+export interface ActionReport {
+  [index: string]: {
+    query: string;
+    outcome: 'success' | 'error' | 'skipped';
+    title: string;
+    message: string;
+  }[];
+}

package/models/WithMetadata.d.ts

@@ -0,0 +1,12 @@
+import type { Analytic } from './entities/generated/Analytic';
+import type { Dossier } from './entities/generated/Dossier';
+import type { Overview } from './entities/generated/Overview';
+import type { Template } from './entities/generated/Template';
+
+export type WithMetadata<T> = T & {
+  __analytic?: Analytic;
+  __overview?: Overview;
+  __template?: Template;
+
+  __dossiers?: Dossier[];
+};

package/models/entities/HowlerUser.d.ts

@@ -0,0 +1,18 @@
+import type { AppUser } from 'commons/components/app/AppUserService';
+
+export interface HowlerUser extends AppUser {
+  name: string;
+  email: string;
+  username: string;
+  api_quota?: number;
+  classification?: string;
+  apikeys?: [string, string[], string][];
+  groups?: string[];
+  roles?: string[];
+  type: string[];
+  has_password?: boolean;
+  is_active?: boolean;
+  favourite_views?: string[];
+  favourite_analytics?: string[];
+  dashboard?: { entry_id: string; type: 'view' | 'analytic'; config: string }[];
+}

package/models/entities/generated/Account.d.ts

@@ -0,0 +1,7 @@
+/**
+ * NOTE: This is an auto-generated file. Don't edit this manually.
+ */
+export interface Account {
+  id?: string;
+  name?: string;
+}

package/models/entities/generated/Action.d.ts

@@ -0,0 +1,13 @@
+import type { Operation } from './Operation';
+
+/**
+ * NOTE: This is an auto-generated file. Don't edit this manually.
+ */
+export interface Action {
+  action_id?: string;
+  name?: string;
+  operations?: Operation[];
+  owner_id?: string;
+  query?: string;
+  triggers?: string[];
+}

package/models/entities/generated/Agent.d.ts

@@ -0,0 +1,9 @@
+/**
+ * NOTE: This is an auto-generated file. Don't edit this manually.
+ */
+export interface Agent {
+  id?: string;
+  name?: string;
+  type?: string;
+  version?: string;
+}

package/models/entities/generated/Analytic.d.ts

@@ -0,0 +1,21 @@
+import type { Notebook } from './Notebook';
+import type { Comment } from './Comment';
+import type { TriageSettings } from './TriageSettings';
+
+/**
+ * NOTE: This is an auto-generated file. Don't edit this manually.
+ */
+export interface Analytic {
+  notebooks?: Notebook[];
+  analytic_id?: string;
+  comment?: Comment[];
+  contributors?: string[];
+  description?: string;
+  detections?: string[];
+  name?: string;
+  owner?: string;
+  rule?: string;
+  rule_crontab?: string;
+  rule_type?: string;
+  triage_settings?: TriageSettings;
+}

package/models/entities/generated/Answer.d.ts

@@ -0,0 +1,10 @@
+/**
+ * NOTE: This is an auto-generated file. Don't edit this manually.
+ */
+export interface Answer {
+  class?: string;
+  data?: string;
+  name?: string;
+  ttl?: number;
+  type?: string;
+}

package/models/entities/generated/Antivirus.d.ts

@@ -0,0 +1,9 @@
+/**
+ * NOTE: This is an auto-generated file. Don't edit this manually.
+ */
+export interface Antivirus {
+  subtype?: string;
+  type?: string;
+  value?: string;
+  verdict?: string;
+}

package/models/entities/generated/ApiType.d.ts

@@ -0,0 +1,238 @@
+/**
+ * NOTE: This is an auto-generated file. Don't edit this manually.
+ */
+export interface APIIndex {
+  default: boolean;
+  indexed: boolean;
+  list: boolean;
+  stored: boolean;
+  deprecated: boolean;
+  type: string;
+  description: string;
+  regex: string;
+  values: string[];
+  deprecated_description: string;
+}
+
+/**
+ * NOTE: This is an auto-generated file. Don't edit this manually.
+ */
+export interface APIIndexes {
+  action: { [index: string]: APIIndex };
+  analytic: { [index: string]: APIIndex };
+  dossier: { [index: string]: APIIndex };
+  hit: { [index: string]: APIIndex };
+  overview: { [index: string]: APIIndex };
+  template: { [index: string]: APIIndex };
+  user: { [index: string]: APIIndex };
+  view: { [index: string]: APIIndex };
+}
+
+/**
+ * NOTE: This is an auto-generated file. Don't edit this manually.
+ */
+export interface APILookups {
+  'howler.status': ['open', 'in-progress', 'on-hold', 'resolved'];
+  'howler.scrutiny': ['unseen', 'surveyed', 'scanned', 'inspected', 'investigated'];
+  'howler.escalation': ['miss', 'hit', 'alert', 'evidence'];
+  'howler.assessment': [
+    'ambiguous',
+    'security',
+    'development',
+    'false-positive',
+    'legitimate',
+    'trivial',
+    'recon',
+    'attempt',
+    'compromise',
+    'mitigated'
+  ];
+  transitions: { [index: string]: string[] };
+  tactics: { [index: string]: { key: string; name: string; url: string } };
+  techniques: { [index: string]: { key: string; name: string; url: string } };
+  icons: string[];
+  roles: ['admin', 'automation_advanced', 'automation_basic', 'user'];
+}
+
+export interface APIConfiguration {
+  auth: {
+    allow_apikeys: boolean;
+    allow_extended_apikeys: boolean;
+    max_apikey_duration_amount?: number;
+    max_apikey_duration_unit?: 'seconds' | 'minutes' | 'hours' | 'days' | 'weeks' | 'months' | 'years';
+    oauth_providers: string[];
+    internal: {
+      enabled: boolean;
+    };
+  };
+  system: {
+    type: string;
+    version: string;
+    branch: string;
+    commit: string;
+    retention: {
+      enabled: boolean;
+      limit_unit: string;
+      limit_amount: number;
+    };
+  };
+  ui: {
+    apps: { alt: string; name: string; img_d: string; img_l: string; route: string; classification: string }[];
+  };
+  mapping: APIMappings;
+  features: {
+    notebook: boolean;
+    [feature: string]: boolean;
+  };
+}
+
+export interface APIC12Ndef {
+  levels_map: {
+    U: number;
+    100: string;
+    PA: number;
+    110: string;
+    PB: number;
+    120: string;
+    PC: number;
+    130: string;
+    S: number;
+    TS: number;
+  };
+  levels_map_stl: {
+    U: string;
+    PA: string;
+    PB: string;
+    PC: string;
+    S: string;
+    TS: string;
+  };
+  levels_map_lts: {
+    Unclassified: string;
+    'Protected A': string;
+    'Protected B': string;
+    'Protected C': string;
+    Secret: string;
+    'Top Secret': string;
+  };
+  levels_styles_map: {
+    U: {
+      color: string;
+    };
+    Unclassified: {
+      color: string;
+    };
+    PA: {
+      color: string;
+    };
+    'Protected A': {
+      color: string;
+    };
+    PB: {
+      color: string;
+    };
+    'Protected B': {
+      color: string;
+    };
+    PC: {
+      color: string;
+    };
+    'Protected C': {
+      color: string;
+    };
+    S: {
+      color: string;
+    };
+    Secret: {
+      color: string;
+    };
+    TS: {
+      color: string;
+    };
+    'Top Secret': {
+      color: string;
+    };
+  };
+  levels_aliases: {
+    U: string;
+    UNCLASSIFIED: string;
+    PA: string;
+    'PROTECTED A': string;
+    PB: string;
+    'PROTECTED B': string;
+    PC: string;
+    'PROTECTED C': string;
+    S: string;
+    SECRET: string;
+    TS: string;
+    'TOP SECRET': string;
+  };
+  access_req_map_lts: {
+    'Official Use Only': string;
+  };
+  access_req_map_stl: {
+    OUO: string;
+  };
+  access_req_aliases: {
+    'OFFICIAL USE ONLY': string[];
+  };
+  groups_map_lts: {};
+  groups_map_stl: {};
+  groups_aliases: {};
+  groups_auto_select: [];
+  groups_auto_select_short: [];
+  subgroups_map_lts: {};
+  subgroups_map_stl: {};
+  subgroups_aliases: {};
+  subgroups_auto_select: [];
+  subgroups_auto_select_short: [];
+  params_map: {
+    U: {};
+    Unclassified: {};
+    PA: {};
+    'Protected A': {};
+    PB: {};
+    'Protected B': {};
+    PC: {};
+    'Protected C': {};
+    S: {};
+    Secret: {};
+    TS: {};
+    'Top Secret': {};
+    OUO: {};
+    'Official Use Only': {};
+  };
+  description: {
+    U: string;
+    Unclassified: string;
+    PA: string;
+    'Protected A': string;
+    PB: string;
+    'Protected B': string;
+    PC: string;
+    'Protected C': string;
+    S: string;
+    Secret: string;
+    TS: string;
+    'Top Secret': string;
+    OUO: string;
+    'Official Use Only': string;
+  };
+  invalid_mode: boolean;
+  enforce: boolean;
+  dynamic_groups: boolean;
+  UNRESTRICTED: string;
+  RESTRICTED: string;
+}
+
+export interface APIMappings {
+  mapping: { [index: string]: string };
+}
+
+export interface ApiType {
+  indexes: APIIndexes;
+  lookups: APILookups;
+  configuration: APIConfiguration;
+  c12nDef: APIC12Ndef;
+  mapping: APIMappings;
+}

package/models/entities/generated/Assemblyline.d.ts

@@ -0,0 +1,22 @@
+import type { Antivirus } from './Antivirus';
+import type { Attribution } from './Attribution';
+import type { Behaviour } from './Behaviour';
+import type { Domain } from './Domain';
+import type { Heuristic } from './Heuristic';
+import type { Mitre } from './Mitre';
+import type { Uri } from './Uri';
+import type { Yara } from './Yara';
+
+/**
+ * NOTE: This is an auto-generated file. Don't edit this manually.
+ */
+export interface Assemblyline {
+  antivirus?: Antivirus[];
+  attribution?: Attribution[];
+  behaviour?: Behaviour[];
+  domain?: Domain[];
+  heuristic?: Heuristic[];
+  mitre?: Mitre;
+  uri?: Uri[];
+  yara?: Yara[];
+}

package/models/entities/generated/Attachment.d.ts

@@ -0,0 +1,8 @@
+import type { File } from './File';
+
+/**
+ * NOTE: This is an auto-generated file. Don't edit this manually.
+ */
+export interface Attachment {
+  file?: File;
+}

package/models/entities/generated/Attribution.d.ts

@@ -0,0 +1,9 @@
+/**
+ * NOTE: This is an auto-generated file. Don't edit this manually.
+ */
+export interface Attribution {
+  subtype?: string;
+  type?: string;
+  value?: string;
+  verdict?: string;
+}

package/models/entities/generated/AutonomousSystems.d.ts

@@ -0,0 +1,7 @@
+/**
+ * NOTE: This is an auto-generated file. Don't edit this manually.
+ */
+export interface AutonomousSystems {
+  number?: number;
+  organization_name?: string;
+}

package/models/entities/generated/Aws.d.ts

@@ -0,0 +1,10 @@
+import type { Account } from './Account';
+import type { Organization } from './Organization';
+
+/**
+ * NOTE: This is an auto-generated file. Don't edit this manually.
+ */
+export interface Aws {
+  account?: Account;
+  organization?: Organization;
+}

package/models/entities/generated/Azure.d.ts

@@ -0,0 +1,10 @@
+/**
+ * NOTE: This is an auto-generated file. Don't edit this manually.
+ */
+export interface Azure {
+  resource_group?: string;
+  resource_id?: string;
+  subscription_id?: string;
+  tenant_id?: string;
+  upn?: string;
+}

package/models/entities/generated/Bcc.d.ts

@@ -0,0 +1,6 @@
+/**
+ * NOTE: This is an auto-generated file. Don't edit this manually.
+ */
+export interface Bcc {
+  address?: string;
+}

package/models/entities/generated/Behaviour.d.ts

@@ -0,0 +1,9 @@
+/**
+ * NOTE: This is an auto-generated file. Don't edit this manually.
+ */
+export interface Behaviour {
+  subtype?: string;
+  type?: string;
+  value?: string;
+  verdict?: string;
+}

package/models/entities/generated/Body.d.ts

@@ -0,0 +1,7 @@
+/**
+ * NOTE: This is an auto-generated file. Don't edit this manually.
+ */
+export interface Body {
+  bytes?: number;
+  content?: string;
+}

package/models/entities/generated/Cbs.d.ts

@@ -0,0 +1,8 @@
+import type { Sharepoint } from './Sharepoint';
+
+/**
+ * NOTE: This is an auto-generated file. Don't edit this manually.
+ */
+export interface Cbs {
+  sharepoint?: Sharepoint;
+}

package/models/entities/generated/Cc.d.ts

@@ -0,0 +1,6 @@
+/**
+ * NOTE: This is an auto-generated file. Don't edit this manually.
+ */
+export interface Cc {
+  address?: string;
+}

package/models/entities/generated/Client.d.ts

@@ -0,0 +1,7 @@
+/**
+ * NOTE: This is an auto-generated file. Don't edit this manually.
+ */
+export interface Client {
+  ja3?: string;
+  server_name?: string;
+}

package/models/entities/generated/Cloud.d.ts

@@ -0,0 +1,20 @@
+import type { CloudAccount } from './CloudAccount';
+import type { Instance } from './Instance';
+import type { Machine } from './Machine';
+import type { Project } from './Project';
+import type { Service } from './Service';
+
+/**
+ * NOTE: This is an auto-generated file. Don't edit this manually.
+ */
+export interface Cloud {
+  account?: CloudAccount;
+  availability_zone?: string;
+  instance?: Instance;
+  machine?: Machine;
+  project?: Project;
+  provider?: string;
+  region?: string;
+  service?: Service;
+  tenant_id?: string;
+}

package/models/entities/generated/CloudAccount.d.ts

@@ -0,0 +1,7 @@
+/**
+ * NOTE: This is an auto-generated file. Don't edit this manually.
+ */
+export interface CloudAccount {
+  id?: string;
+  name?: string;
+}

package/models/entities/generated/CodeSignature.d.ts

@@ -0,0 +1,14 @@
+/**
+ * NOTE: This is an auto-generated file. Don't edit this manually.
+ */
+export interface CodeSignature {
+  digest_algorithm?: string;
+  exists?: boolean;
+  signing_id?: string;
+  status?: string;
+  subject_name?: string;
+  team_id?: string;
+  timestamp?: string;
+  trusted?: boolean;
+  valid?: boolean;
+}

package/models/entities/generated/Comment.d.ts

@@ -0,0 +1,12 @@
+/**
+ * NOTE: This is an auto-generated file. Don't edit this manually.
+ */
+export interface Comment {
+  detection?: string;
+  id?: string;
+  modified?: string;
+  reactions?: { [index: string]: string };
+  timestamp?: string;
+  user?: string;
+  value?: string;
+}

package/models/entities/generated/Container.d.ts

@@ -0,0 +1,12 @@
+import type { Image } from './Image';
+
+/**
+ * NOTE: This is an auto-generated file. Don't edit this manually.
+ */
+export interface Container {
+  id?: string;
+  image?: Image;
+  labels?: { [index: string]: string };
+  name?: string;
+  runtime?: string;
+}

package/models/entities/generated/Created.d.ts

@@ -0,0 +1,7 @@
+/**
+ * NOTE: This is an auto-generated file. Don't edit this manually.
+ */
+export interface Created {
+  application?: string;
+  user?: string;
+}