@cccsaurora/howler-ui 2.17.0-dev.502 → 2.17.0-dev.513
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/api/index.d.ts +2 -0
- package/api/index.js +4 -2
- package/api/search/case.d.ts +4 -0
- package/api/search/case.js +8 -0
- package/api/search/index.d.ts +2 -1
- package/api/search/index.js +2 -1
- package/api/v2/case/index.d.ts +6 -0
- package/api/v2/case/index.js +18 -0
- package/api/v2/index.d.ts +4 -0
- package/api/v2/index.js +6 -0
- package/api/v2/search/facet.d.ts +3 -0
- package/api/v2/search/facet.js +12 -0
- package/api/v2/search/index.d.ts +6 -0
- package/api/v2/search/index.js +18 -0
- package/commons/components/leftnav/LeftNavDrawer.js +1 -1
- package/components/app/App.js +14 -0
- package/components/app/providers/FavouritesProvider.js +2 -2
- package/components/{routes/overviews/OverviewEditor.js → elements/MarkdownEditor.js} +3 -3
- package/components/elements/{hit/HitDetails.d.ts → ObjectDetails.d.ts} +2 -1
- package/components/elements/{hit/HitDetails.js → ObjectDetails.js} +14 -14
- package/components/elements/PluginTypography.d.ts +2 -1
- package/components/elements/PluginTypography.js +3 -2
- package/components/elements/UserList.d.ts +5 -2
- package/components/elements/UserList.js +14 -5
- package/components/elements/addons/search/phrase/Phrase.js +1 -1
- package/components/elements/display/HowlerCard.js +1 -1
- package/components/elements/hit/HitBanner.js +19 -31
- package/components/elements/hit/outlines/DefaultOutline.js +1 -1
- package/components/elements/view/ViewTitle.js +1 -1
- package/components/hooks/useHitSelection.js +1 -35
- package/components/hooks/useMyPreferences.js +10 -1
- package/components/hooks/useMySitemap.js +3 -1
- package/components/hooks/useMyTheme.js +9 -2
- package/components/routes/action/view/ActionSearch.js +1 -1
- package/components/routes/action/view/Integrations.js +1 -9
- package/components/routes/advanced/QueryBuilder.js +1 -1
- package/components/routes/analytics/AnalyticDetails.js +2 -2
- package/components/routes/analytics/AnalyticSearch.js +1 -1
- package/components/routes/cases/CaseCard.d.ts +8 -0
- package/components/routes/cases/CaseCard.js +34 -0
- package/components/routes/cases/CaseViewer.d.ts +2 -0
- package/components/routes/cases/CaseViewer.js +24 -0
- package/components/routes/cases/Cases.d.ts +2 -0
- package/components/routes/cases/Cases.js +101 -0
- package/components/routes/cases/constants.d.ts +5 -0
- package/components/routes/cases/constants.js +5 -0
- package/components/routes/cases/detail/AlertPanel.d.ts +6 -0
- package/components/routes/cases/detail/AlertPanel.js +32 -0
- package/components/routes/cases/detail/CaseDashboard.d.ts +7 -0
- package/components/routes/cases/detail/CaseDashboard.js +46 -0
- package/components/routes/cases/detail/CaseDetails.d.ts +6 -0
- package/components/routes/cases/detail/CaseDetails.js +49 -0
- package/components/routes/cases/detail/CaseOverview.d.ts +7 -0
- package/components/routes/cases/detail/CaseOverview.js +43 -0
- package/components/routes/cases/detail/CaseSidebar.d.ts +6 -0
- package/components/routes/cases/detail/CaseSidebar.js +36 -0
- package/components/routes/cases/detail/CaseTask.d.ts +10 -0
- package/components/routes/cases/detail/CaseTask.js +46 -0
- package/components/routes/cases/detail/ItemPage.d.ts +6 -0
- package/components/routes/cases/detail/ItemPage.js +93 -0
- package/components/routes/cases/detail/RelatedCasePanel.d.ts +6 -0
- package/components/routes/cases/detail/RelatedCasePanel.js +31 -0
- package/components/routes/cases/detail/TaskPanel.d.ts +7 -0
- package/components/routes/cases/detail/TaskPanel.js +23 -0
- package/components/routes/cases/detail/aggregates/CaseAggregate.d.ts +12 -0
- package/components/routes/cases/detail/aggregates/CaseAggregate.js +19 -0
- package/components/routes/cases/detail/aggregates/SourceAggregate.d.ts +6 -0
- package/components/routes/cases/detail/aggregates/SourceAggregate.js +27 -0
- package/components/routes/cases/detail/sidebar/CaseFolder.d.ts +12 -0
- package/components/routes/cases/detail/sidebar/CaseFolder.js +114 -0
- package/components/routes/cases/detail/sidebar/types.d.ts +3 -0
- package/components/routes/cases/hooks/useCase.d.ts +13 -0
- package/components/routes/cases/hooks/useCase.js +38 -0
- package/components/routes/help/ApiDocumentation.js +1 -1
- package/components/routes/help/HitDocumentation.js +1 -3
- package/components/routes/hits/search/HitContextMenu.js +4 -27
- package/components/routes/hits/search/HitContextMenu.test.js +0 -140
- package/components/routes/hits/search/InformationPane.d.ts +1 -0
- package/components/routes/hits/search/InformationPane.js +6 -29
- package/components/routes/hits/search/SearchPane.js +3 -5
- package/components/routes/hits/search/ViewLink.js +1 -1
- package/components/routes/hits/search/grid/EnhancedCell.js +1 -1
- package/components/routes/hits/view/HitViewer.js +3 -4
- package/components/routes/home/ViewCard.js +1 -1
- package/components/routes/observables/ObservableViewer.d.ts +7 -0
- package/components/routes/observables/ObservableViewer.js +27 -0
- package/components/routes/overviews/OverviewViewer.js +2 -2
- package/locales/en/translation.json +422 -397
- package/locales/fr/translation.json +429 -406
- package/models/entities/generated/AttachmentsFile.d.ts +12 -0
- package/models/entities/generated/Case.d.ts +28 -0
- package/models/entities/generated/DestinationOriginal.d.ts +19 -0
- package/models/entities/generated/EmailAttachment.d.ts +8 -0
- package/models/entities/generated/EmailParent.d.ts +19 -0
- package/models/entities/generated/Enrichments.d.ts +7 -0
- package/models/entities/generated/EnrichmentsIndicator.d.ts +21 -0
- package/models/entities/generated/Howler.d.ts +0 -4
- package/models/entities/generated/HttpResponse.d.ts +11 -0
- package/models/entities/generated/Item.d.ts +9 -0
- package/models/entities/generated/Observable.d.ts +84 -0
- package/models/entities/generated/ObservableCloud.d.ts +20 -0
- package/models/entities/generated/ObservableDestination.d.ts +23 -0
- package/models/entities/generated/ObservableEmail.d.ts +30 -0
- package/models/entities/generated/ObservableFile.d.ts +36 -0
- package/models/entities/generated/ObservableHowler.d.ts +44 -0
- package/models/entities/generated/ObservableHttp.d.ts +11 -0
- package/models/entities/generated/ObservableObserver.d.ts +21 -0
- package/models/entities/generated/ObservableOrganization.d.ts +7 -0
- package/models/entities/generated/ObservableProcess.d.ts +34 -0
- package/models/entities/generated/ObservableSource.d.ts +23 -0
- package/models/entities/generated/ObservableThreat.d.ts +21 -0
- package/models/entities/generated/ObservableTls.d.ts +12 -0
- package/models/entities/generated/ObserverIngress.d.ts +9 -0
- package/models/entities/generated/Rule.d.ts +2 -10
- package/models/entities/generated/Task.d.ts +10 -0
- package/models/entities/generated/Threat.d.ts +2 -2
- package/models/entities/generated/{Enrichment.d.ts → ThreatEnrichment.d.ts} +1 -1
- package/package.json +125 -114
- package/plugins/clue/components/ClueTypography.js +2 -2
- package/plugins/clue/utils.d.ts +2 -1
- package/components/elements/display/icons/BundleButton.d.ts +0 -6
- package/components/elements/display/icons/BundleButton.js +0 -32
- package/components/routes/action/view/markdown/integrations.en.md.js +0 -1
- package/components/routes/action/view/markdown/integrations.fr.md.js +0 -1
- package/components/routes/help/BundleDocumentation.d.ts +0 -3
- package/components/routes/help/BundleDocumentation.js +0 -12
- package/components/routes/help/markdown/en/bundles.md.js +0 -1
- package/components/routes/help/markdown/fr/bundles.md.js +0 -1
- package/components/routes/hits/search/BundleParentMenu.d.ts +0 -6
- package/components/routes/hits/search/BundleParentMenu.js +0 -32
- /package/components/{routes/overviews/OverviewEditor.d.ts → elements/MarkdownEditor.d.ts} +0 -0
package/package.json
CHANGED
|
@@ -101,130 +101,83 @@
|
|
|
101
101
|
"internal-slot": "1.0.7"
|
|
102
102
|
},
|
|
103
103
|
"type": "module",
|
|
104
|
-
"version": "2.17.0-dev.
|
|
104
|
+
"version": "2.17.0-dev.513",
|
|
105
105
|
"exports": {
|
|
106
106
|
"./i18n": "./i18n.js",
|
|
107
107
|
"./index.css": "./index.css",
|
|
108
|
-
"./
|
|
109
|
-
"./api": "./api/index.js",
|
|
110
|
-
"./models/*": "./models/*.js",
|
|
111
|
-
"./locales/*.json": "./locales/*.json",
|
|
108
|
+
"./components/*": "./components/*.js",
|
|
112
109
|
"./branding/*": "./branding/*.js",
|
|
110
|
+
"./tests/*": "./tests/*.js",
|
|
111
|
+
"./commons/*": "./commons/*.js",
|
|
113
112
|
"./utils/*": "./utils/*.js",
|
|
114
113
|
"./utils/*.json": "./utils/*.json",
|
|
114
|
+
"./locales/*.json": "./locales/*.json",
|
|
115
|
+
"./api/*": "./api/*.js",
|
|
116
|
+
"./api": "./api/index.js",
|
|
117
|
+
"./plugins/*": "./plugins/*.js",
|
|
118
|
+
"./models/*": "./models/*.js",
|
|
115
119
|
"./rest/*": "./rest/*.js",
|
|
116
120
|
"./rest": "./rest/index.js",
|
|
117
|
-
"./components/*": "./components/*.js",
|
|
118
|
-
"./commons/*": "./commons/*.js",
|
|
119
|
-
"./plugins/*": "./plugins/*.js",
|
|
120
|
-
"./tests/*": "./tests/*.js",
|
|
121
|
-
"./api/analytic/*": "./api/analytic/*.js",
|
|
122
|
-
"./api/analytic": "./api/analytic/index.js",
|
|
123
|
-
"./api/template/*": "./api/template/*.js",
|
|
124
|
-
"./api/template": "./api/template/index.js",
|
|
125
|
-
"./api/hit/*": "./api/hit/*.js",
|
|
126
|
-
"./api/hit": "./api/hit/index.js",
|
|
127
|
-
"./api/notebook/*": "./api/notebook/*.js",
|
|
128
|
-
"./api/notebook": "./api/notebook/index.js",
|
|
129
|
-
"./api/auth/*": "./api/auth/*.js",
|
|
130
|
-
"./api/auth": "./api/auth/index.js",
|
|
131
|
-
"./api/search/*": "./api/search/*.js",
|
|
132
|
-
"./api/search": "./api/search/index.js",
|
|
133
|
-
"./api/dossier/*": "./api/dossier/*.js",
|
|
134
|
-
"./api/dossier": "./api/dossier/index.js",
|
|
135
|
-
"./api/view/*": "./api/view/*.js",
|
|
136
|
-
"./api/view": "./api/view/index.js",
|
|
137
|
-
"./api/overview/*": "./api/overview/*.js",
|
|
138
|
-
"./api/overview": "./api/overview/index.js",
|
|
139
|
-
"./api/user/*": "./api/user/*.js",
|
|
140
|
-
"./api/user": "./api/user/index.js",
|
|
141
|
-
"./api/action/*": "./api/action/*.js",
|
|
142
|
-
"./api/action": "./api/action/index.js",
|
|
143
|
-
"./api/configs/*": "./api/configs/*.js",
|
|
144
|
-
"./api/configs": "./api/configs/index.js",
|
|
145
|
-
"./api/analytic/comments/*": "./api/analytic/comments/*.js",
|
|
146
|
-
"./api/analytic/comments": "./api/analytic/comments/index.js",
|
|
147
|
-
"./api/analytic/notebooks/*": "./api/analytic/notebooks/*.js",
|
|
148
|
-
"./api/analytic/notebooks": "./api/analytic/notebooks/index.js",
|
|
149
|
-
"./api/hit/comments/*": "./api/hit/comments/*.js",
|
|
150
|
-
"./api/hit/comments": "./api/hit/comments/index.js",
|
|
151
|
-
"./api/search/facet/*": "./api/search/facet/*.js",
|
|
152
|
-
"./api/search/facet": "./api/search/facet/index.js",
|
|
153
|
-
"./api/search/explain/*": "./api/search/explain/*.js",
|
|
154
|
-
"./api/search/count/*": "./api/search/count/*.js",
|
|
155
|
-
"./api/search/count": "./api/search/count/index.js",
|
|
156
|
-
"./api/search/fields/*": "./api/search/fields/*.js",
|
|
157
|
-
"./api/search/fields": "./api/search/fields/index.js",
|
|
158
|
-
"./api/search/eql/*": "./api/search/eql/*.js",
|
|
159
|
-
"./api/search/sigma/*": "./api/search/sigma/*.js",
|
|
160
|
-
"./api/search/grouped/*": "./api/search/grouped/*.js",
|
|
161
|
-
"./api/search/grouped": "./api/search/grouped/index.js",
|
|
162
|
-
"./api/search/histogram/*": "./api/search/histogram/*.js",
|
|
163
|
-
"./api/search/histogram": "./api/search/histogram/index.js",
|
|
164
|
-
"./api/user/avatar/*": "./api/user/avatar/*.js",
|
|
165
|
-
"./api/user/avatar": "./api/user/avatar/index.js",
|
|
166
|
-
"./models/socket/*": "./models/socket/*.js",
|
|
167
|
-
"./models/entities/*": "./models/entities/*.js",
|
|
168
|
-
"./models/entities/generated/*": "./models/entities/generated/*.js",
|
|
169
|
-
"./locales/en/*.json": "./locales/en/*.json",
|
|
170
|
-
"./locales/fr/*.json": "./locales/fr/*.json",
|
|
171
|
-
"./locales/en/help/*.json": "./locales/en/help/*.json",
|
|
172
|
-
"./locales/fr/help/*.json": "./locales/fr/help/*.json",
|
|
173
|
-
"./components/hooks/*": "./components/hooks/*.js",
|
|
174
|
-
"./components/app/*": "./components/app/*.js",
|
|
175
121
|
"./components/logins/*": "./components/logins/*.js",
|
|
122
|
+
"./components/app/*": "./components/app/*.js",
|
|
176
123
|
"./components/elements/*": "./components/elements/*.js",
|
|
124
|
+
"./components/hooks/*": "./components/hooks/*.js",
|
|
177
125
|
"./components/routes/*": "./components/routes/*.js",
|
|
178
|
-
"./components/app/hooks/*": "./components/app/hooks/*.js",
|
|
179
|
-
"./components/app/providers/*": "./components/app/providers/*.js",
|
|
180
|
-
"./components/app/drawers/*": "./components/app/drawers/*.js",
|
|
181
|
-
"./components/logins/hooks/*": "./components/logins/hooks/*.js",
|
|
182
126
|
"./components/logins/auth/*": "./components/logins/auth/*.js",
|
|
183
|
-
"./components/
|
|
127
|
+
"./components/logins/hooks/*": "./components/logins/hooks/*.js",
|
|
128
|
+
"./components/app/drawers/*": "./components/app/drawers/*.js",
|
|
129
|
+
"./components/app/providers/*": "./components/app/providers/*.js",
|
|
130
|
+
"./components/app/hooks/*": "./components/app/hooks/*.js",
|
|
131
|
+
"./components/elements/display/*": "./components/elements/display/*.js",
|
|
184
132
|
"./components/elements/hit/*": "./components/elements/hit/*.js",
|
|
185
133
|
"./components/elements/view/*": "./components/elements/view/*.js",
|
|
186
|
-
"./components/elements/
|
|
134
|
+
"./components/elements/addons/*": "./components/elements/addons/*.js",
|
|
135
|
+
"./components/elements/display/handlebars/*": "./components/elements/display/handlebars/*.js",
|
|
136
|
+
"./components/elements/display/modals/*": "./components/elements/display/modals/*.js",
|
|
137
|
+
"./components/elements/display/features/*": "./components/elements/display/features/*.js",
|
|
138
|
+
"./components/elements/display/icons/*": "./components/elements/display/icons/*.js",
|
|
139
|
+
"./components/elements/display/json/*": "./components/elements/display/json/*.js",
|
|
140
|
+
"./components/elements/display/markdownPlugins/*.md": "./components/elements/display/markdownPlugins/*.md.js",
|
|
141
|
+
"./components/elements/display/icons/svg/*": "./components/elements/display/icons/svg/*.js",
|
|
142
|
+
"./components/elements/hit/actions/*": "./components/elements/hit/actions/*.js",
|
|
143
|
+
"./components/elements/hit/related/*": "./components/elements/hit/related/*.js",
|
|
144
|
+
"./components/elements/hit/elements/*": "./components/elements/hit/elements/*.js",
|
|
145
|
+
"./components/elements/hit/outlines/*": "./components/elements/hit/outlines/*.js",
|
|
146
|
+
"./components/elements/hit/aggregate/*": "./components/elements/hit/aggregate/*.js",
|
|
147
|
+
"./components/elements/hit/outlines/al/*": "./components/elements/hit/outlines/al/*.js",
|
|
187
148
|
"./components/elements/addons/buttons/*": "./components/elements/addons/buttons/*.js",
|
|
188
149
|
"./components/elements/addons/buttons": "./components/elements/addons/buttons/index.js",
|
|
189
|
-
"./components/elements/addons/search/*": "./components/elements/addons/search/*.js",
|
|
190
|
-
"./components/elements/addons/layout/*": "./components/elements/addons/layout/*.js",
|
|
191
150
|
"./components/elements/addons/lists/*": "./components/elements/addons/lists/*.js",
|
|
192
151
|
"./components/elements/addons/lists": "./components/elements/addons/lists/index.js",
|
|
152
|
+
"./components/elements/addons/search/*": "./components/elements/addons/search/*.js",
|
|
153
|
+
"./components/elements/addons/layout/*": "./components/elements/addons/layout/*.js",
|
|
154
|
+
"./components/elements/addons/lists/table/*": "./components/elements/addons/lists/table/*.js",
|
|
155
|
+
"./components/elements/addons/lists/table": "./components/elements/addons/lists/table/index.js",
|
|
156
|
+
"./components/elements/addons/lists/hooks/*": "./components/elements/addons/lists/hooks/*.js",
|
|
193
157
|
"./components/elements/addons/search/phrase/*": "./components/elements/addons/search/phrase/*.js",
|
|
194
158
|
"./components/elements/addons/search/phrase": "./components/elements/addons/search/phrase/index.js",
|
|
195
159
|
"./components/elements/addons/search/phrase/word/*": "./components/elements/addons/search/phrase/word/*.js",
|
|
196
160
|
"./components/elements/addons/search/phrase/word/consumers/*": "./components/elements/addons/search/phrase/word/consumers/*.js",
|
|
197
161
|
"./components/elements/addons/layout/vsbox/*": "./components/elements/addons/layout/vsbox/*.js",
|
|
198
|
-
"./components/elements/addons/lists/hooks/*": "./components/elements/addons/lists/hooks/*.js",
|
|
199
|
-
"./components/elements/addons/lists/table/*": "./components/elements/addons/lists/table/*.js",
|
|
200
|
-
"./components/elements/addons/lists/table": "./components/elements/addons/lists/table/index.js",
|
|
201
|
-
"./components/elements/hit/aggregate/*": "./components/elements/hit/aggregate/*.js",
|
|
202
|
-
"./components/elements/hit/outlines/*": "./components/elements/hit/outlines/*.js",
|
|
203
|
-
"./components/elements/hit/related/*": "./components/elements/hit/related/*.js",
|
|
204
|
-
"./components/elements/hit/elements/*": "./components/elements/hit/elements/*.js",
|
|
205
|
-
"./components/elements/hit/actions/*": "./components/elements/hit/actions/*.js",
|
|
206
|
-
"./components/elements/hit/outlines/al/*": "./components/elements/hit/outlines/al/*.js",
|
|
207
|
-
"./components/elements/display/icons/*": "./components/elements/display/icons/*.js",
|
|
208
|
-
"./components/elements/display/modals/*": "./components/elements/display/modals/*.js",
|
|
209
|
-
"./components/elements/display/markdownPlugins/*.md": "./components/elements/display/markdownPlugins/*.md.js",
|
|
210
|
-
"./components/elements/display/json/*": "./components/elements/display/json/*.js",
|
|
211
|
-
"./components/elements/display/handlebars/*": "./components/elements/display/handlebars/*.js",
|
|
212
|
-
"./components/elements/display/features/*": "./components/elements/display/features/*.js",
|
|
213
|
-
"./components/elements/display/icons/svg/*": "./components/elements/display/icons/svg/*.js",
|
|
214
|
-
"./components/routes/admin/*": "./components/routes/admin/*.js",
|
|
215
|
-
"./components/routes/dossiers/*": "./components/routes/dossiers/*.js",
|
|
216
|
-
"./components/routes/advanced/*": "./components/routes/advanced/*.js",
|
|
217
|
-
"./components/routes/hits/*": "./components/routes/hits/*.js",
|
|
218
|
-
"./components/routes/settings/*": "./components/routes/settings/*.js",
|
|
219
162
|
"./components/routes/home/*": "./components/routes/home/*.js",
|
|
220
163
|
"./components/routes/home": "./components/routes/home/index.js",
|
|
221
|
-
"./components/routes/analytics/*": "./components/routes/analytics/*.js",
|
|
222
|
-
"./components/routes/help/*": "./components/routes/help/*.js",
|
|
223
164
|
"./components/routes/action/*": "./components/routes/action/*.js",
|
|
224
|
-
"./components/routes/views/*": "./components/routes/views/*.js",
|
|
225
|
-
"./components/routes/overviews/*": "./components/routes/overviews/*.js",
|
|
226
165
|
"./components/routes/templates/*": "./components/routes/templates/*.js",
|
|
227
|
-
"./components/routes/
|
|
166
|
+
"./components/routes/dossiers/*": "./components/routes/dossiers/*.js",
|
|
167
|
+
"./components/routes/overviews/*": "./components/routes/overviews/*.js",
|
|
168
|
+
"./components/routes/views/*": "./components/routes/views/*.js",
|
|
169
|
+
"./components/routes/hits/*": "./components/routes/hits/*.js",
|
|
170
|
+
"./components/routes/analytics/*": "./components/routes/analytics/*.js",
|
|
171
|
+
"./components/routes/advanced/*": "./components/routes/advanced/*.js",
|
|
172
|
+
"./components/routes/help/*": "./components/routes/help/*.js",
|
|
173
|
+
"./components/routes/admin/*": "./components/routes/admin/*.js",
|
|
174
|
+
"./components/routes/settings/*": "./components/routes/settings/*.js",
|
|
175
|
+
"./components/routes/observables/*": "./components/routes/observables/*.js",
|
|
176
|
+
"./components/routes/cases/*": "./components/routes/cases/*.js",
|
|
177
|
+
"./components/routes/action/edit/*": "./components/routes/action/edit/*.js",
|
|
178
|
+
"./components/routes/action/view/*": "./components/routes/action/view/*.js",
|
|
179
|
+
"./components/routes/action/shared/*": "./components/routes/action/shared/*.js",
|
|
180
|
+
"./components/routes/overviews/template/*": "./components/routes/overviews/template/*.js",
|
|
228
181
|
"./components/routes/hits/search/*": "./components/routes/hits/search/*.js",
|
|
229
182
|
"./components/routes/hits/view/*": "./components/routes/hits/view/*.js",
|
|
230
183
|
"./components/routes/hits/search/grid/*": "./components/routes/hits/search/grid/*.js",
|
|
@@ -232,35 +185,93 @@
|
|
|
232
185
|
"./components/routes/analytics/widgets/*": "./components/routes/analytics/widgets/*.js",
|
|
233
186
|
"./components/routes/help/components/*": "./components/routes/help/components/*.js",
|
|
234
187
|
"./components/routes/help/markdown/*.md": "./components/routes/help/markdown/*.md.js",
|
|
235
|
-
"./components/routes/help/markdown/en/*.md": "./components/routes/help/markdown/en/*.md.js",
|
|
236
188
|
"./components/routes/help/markdown/fr/*.md": "./components/routes/help/markdown/fr/*.md.js",
|
|
237
|
-
"./components/routes/
|
|
238
|
-
"./components/routes/
|
|
239
|
-
"./components/routes/
|
|
240
|
-
"./components/routes/
|
|
241
|
-
"./components/routes/
|
|
189
|
+
"./components/routes/help/markdown/en/*.md": "./components/routes/help/markdown/en/*.md.js",
|
|
190
|
+
"./components/routes/admin/users/*": "./components/routes/admin/users/*.js",
|
|
191
|
+
"./components/routes/cases/hooks/*": "./components/routes/cases/hooks/*.js",
|
|
192
|
+
"./components/routes/cases/detail/*": "./components/routes/cases/detail/*.js",
|
|
193
|
+
"./components/routes/cases/detail/sidebar/*": "./components/routes/cases/detail/sidebar/*.js",
|
|
194
|
+
"./components/routes/cases/detail/aggregates/*": "./components/routes/cases/detail/aggregates/*.js",
|
|
242
195
|
"./commons/components/*": "./commons/components/*.js",
|
|
196
|
+
"./commons/components/breadcrumbs/*": "./commons/components/breadcrumbs/*.js",
|
|
197
|
+
"./commons/components/app/*": "./commons/components/app/*.js",
|
|
243
198
|
"./commons/components/utils/*": "./commons/components/utils/*.js",
|
|
199
|
+
"./commons/components/notification/*": "./commons/components/notification/*.js",
|
|
200
|
+
"./commons/components/notification": "./commons/components/notification/index.js",
|
|
201
|
+
"./commons/components/display/*": "./commons/components/display/*.js",
|
|
244
202
|
"./commons/components/leftnav/*": "./commons/components/leftnav/*.js",
|
|
203
|
+
"./commons/components/search/*": "./commons/components/search/*.js",
|
|
245
204
|
"./commons/components/pages/*": "./commons/components/pages/*.js",
|
|
246
205
|
"./commons/components/topnav/*": "./commons/components/topnav/*.js",
|
|
247
|
-
"./commons/components/app/*": "./commons/components/app/*.js",
|
|
248
|
-
"./commons/components/search/*": "./commons/components/search/*.js",
|
|
249
|
-
"./commons/components/breadcrumbs/*": "./commons/components/breadcrumbs/*.js",
|
|
250
|
-
"./commons/components/display/*": "./commons/components/display/*.js",
|
|
251
|
-
"./commons/components/notification/*": "./commons/components/notification/*.js",
|
|
252
|
-
"./commons/components/notification": "./commons/components/notification/index.js",
|
|
253
|
-
"./commons/components/utils/hooks/*": "./commons/components/utils/hooks/*.js",
|
|
254
|
-
"./commons/components/pages/hooks/*": "./commons/components/pages/hooks/*.js",
|
|
206
|
+
"./commons/components/app/providers/*": "./commons/components/app/providers/*.js",
|
|
255
207
|
"./commons/components/app/hooks/*": "./commons/components/app/hooks/*.js",
|
|
256
208
|
"./commons/components/app/hooks": "./commons/components/app/hooks/index.js",
|
|
257
|
-
"./commons/components/
|
|
258
|
-
"./commons/components/display/hooks/*": "./commons/components/display/hooks/*.js",
|
|
209
|
+
"./commons/components/utils/hooks/*": "./commons/components/utils/hooks/*.js",
|
|
259
210
|
"./commons/components/notification/elements/*": "./commons/components/notification/elements/*.js",
|
|
260
211
|
"./commons/components/notification/elements/item/*": "./commons/components/notification/elements/item/*.js",
|
|
212
|
+
"./commons/components/display/hooks/*": "./commons/components/display/hooks/*.js",
|
|
213
|
+
"./commons/components/pages/hooks/*": "./commons/components/pages/hooks/*.js",
|
|
214
|
+
"./locales/fr/*.json": "./locales/fr/*.json",
|
|
215
|
+
"./locales/en/*.json": "./locales/en/*.json",
|
|
216
|
+
"./locales/fr/help/*.json": "./locales/fr/help/*.json",
|
|
217
|
+
"./locales/en/help/*.json": "./locales/en/help/*.json",
|
|
218
|
+
"./api/overview/*": "./api/overview/*.js",
|
|
219
|
+
"./api/overview": "./api/overview/index.js",
|
|
220
|
+
"./api/v2/*": "./api/v2/*.js",
|
|
221
|
+
"./api/v2": "./api/v2/index.js",
|
|
222
|
+
"./api/action/*": "./api/action/*.js",
|
|
223
|
+
"./api/action": "./api/action/index.js",
|
|
224
|
+
"./api/auth/*": "./api/auth/*.js",
|
|
225
|
+
"./api/auth": "./api/auth/index.js",
|
|
226
|
+
"./api/notebook/*": "./api/notebook/*.js",
|
|
227
|
+
"./api/notebook": "./api/notebook/index.js",
|
|
228
|
+
"./api/template/*": "./api/template/*.js",
|
|
229
|
+
"./api/template": "./api/template/index.js",
|
|
230
|
+
"./api/analytic/*": "./api/analytic/*.js",
|
|
231
|
+
"./api/analytic": "./api/analytic/index.js",
|
|
232
|
+
"./api/user/*": "./api/user/*.js",
|
|
233
|
+
"./api/user": "./api/user/index.js",
|
|
234
|
+
"./api/dossier/*": "./api/dossier/*.js",
|
|
235
|
+
"./api/dossier": "./api/dossier/index.js",
|
|
236
|
+
"./api/search/*": "./api/search/*.js",
|
|
237
|
+
"./api/search": "./api/search/index.js",
|
|
238
|
+
"./api/configs/*": "./api/configs/*.js",
|
|
239
|
+
"./api/configs": "./api/configs/index.js",
|
|
240
|
+
"./api/hit/*": "./api/hit/*.js",
|
|
241
|
+
"./api/hit": "./api/hit/index.js",
|
|
242
|
+
"./api/view/*": "./api/view/*.js",
|
|
243
|
+
"./api/view": "./api/view/index.js",
|
|
244
|
+
"./api/v2/search/*": "./api/v2/search/*.js",
|
|
245
|
+
"./api/v2/search": "./api/v2/search/index.js",
|
|
246
|
+
"./api/v2/case/*": "./api/v2/case/*.js",
|
|
247
|
+
"./api/v2/case": "./api/v2/case/index.js",
|
|
248
|
+
"./api/analytic/comments/*": "./api/analytic/comments/*.js",
|
|
249
|
+
"./api/analytic/comments": "./api/analytic/comments/index.js",
|
|
250
|
+
"./api/analytic/notebooks/*": "./api/analytic/notebooks/*.js",
|
|
251
|
+
"./api/analytic/notebooks": "./api/analytic/notebooks/index.js",
|
|
252
|
+
"./api/user/avatar/*": "./api/user/avatar/*.js",
|
|
253
|
+
"./api/user/avatar": "./api/user/avatar/index.js",
|
|
254
|
+
"./api/search/eql/*": "./api/search/eql/*.js",
|
|
255
|
+
"./api/search/histogram/*": "./api/search/histogram/*.js",
|
|
256
|
+
"./api/search/histogram": "./api/search/histogram/index.js",
|
|
257
|
+
"./api/search/facet/*": "./api/search/facet/*.js",
|
|
258
|
+
"./api/search/facet": "./api/search/facet/index.js",
|
|
259
|
+
"./api/search/fields/*": "./api/search/fields/*.js",
|
|
260
|
+
"./api/search/fields": "./api/search/fields/index.js",
|
|
261
|
+
"./api/search/grouped/*": "./api/search/grouped/*.js",
|
|
262
|
+
"./api/search/grouped": "./api/search/grouped/index.js",
|
|
263
|
+
"./api/search/sigma/*": "./api/search/sigma/*.js",
|
|
264
|
+
"./api/search/explain/*": "./api/search/explain/*.js",
|
|
265
|
+
"./api/search/count/*": "./api/search/count/*.js",
|
|
266
|
+
"./api/search/count": "./api/search/count/index.js",
|
|
267
|
+
"./api/hit/comments/*": "./api/hit/comments/*.js",
|
|
268
|
+
"./api/hit/comments": "./api/hit/comments/index.js",
|
|
261
269
|
"./plugins/clue/*": "./plugins/clue/*.js",
|
|
262
270
|
"./plugins/clue": "./plugins/clue/index.js",
|
|
271
|
+
"./plugins/clue/components/*": "./plugins/clue/components/*.js",
|
|
263
272
|
"./plugins/clue/locales/*": "./plugins/clue/locales/*.js",
|
|
264
|
-
"./
|
|
273
|
+
"./models/socket/*": "./models/socket/*.js",
|
|
274
|
+
"./models/entities/*": "./models/entities/*.js",
|
|
275
|
+
"./models/entities/generated/*": "./models/entities/generated/*.js"
|
|
265
276
|
}
|
|
266
277
|
}
|
|
@@ -3,8 +3,8 @@ import EnrichedTypography from '@cccsaurora/clue-ui/components/EnrichedTypograph
|
|
|
3
3
|
import { Typography } from '@mui/material';
|
|
4
4
|
import { memo } from 'react';
|
|
5
5
|
import { useType } from '../utils';
|
|
6
|
-
const ClueTypography = ({ children, value, context, field,
|
|
7
|
-
const type = useType(
|
|
6
|
+
const ClueTypography = ({ children, value, context, field, obj, ...props }) => {
|
|
7
|
+
const type = useType(obj, field, value);
|
|
8
8
|
if (!type) {
|
|
9
9
|
return _jsx(Typography, { ...props, children: children ?? value });
|
|
10
10
|
}
|
package/plugins/clue/utils.d.ts
CHANGED
|
@@ -1,2 +1,3 @@
|
|
|
1
1
|
import type { Hit } from '@cccsaurora/howler-ui/models/entities/generated/Hit';
|
|
2
|
-
|
|
2
|
+
import type { Observable } from '@cccsaurora/howler-ui/models/entities/generated/Observable';
|
|
3
|
+
export declare const useType: (hit?: Hit | Observable, field?: string, value?: string) => any;
|
|
@@ -1,32 +0,0 @@
|
|
|
1
|
-
import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-runtime";
|
|
2
|
-
import { AccountTree } from '@mui/icons-material';
|
|
3
|
-
import { ListItemText, Menu, MenuItem, Typography } from '@mui/material';
|
|
4
|
-
import TuiIconButton from '@cccsaurora/howler-ui/components/elements/addons/buttons/CustomIconButton';
|
|
5
|
-
import { useCallback, useState } from 'react';
|
|
6
|
-
import { useTranslation } from 'react-i18next';
|
|
7
|
-
import { useNavigate } from 'react-router-dom';
|
|
8
|
-
const BundleButton = ({ ids, disabled = false }) => {
|
|
9
|
-
const { t } = useTranslation();
|
|
10
|
-
const navigate = useNavigate();
|
|
11
|
-
const [anchorEl, setAnchorEl] = useState(null);
|
|
12
|
-
const onClick = useCallback((event) => {
|
|
13
|
-
if (ids.length === 1) {
|
|
14
|
-
navigate(`/bundles/${ids[0]}`);
|
|
15
|
-
}
|
|
16
|
-
else {
|
|
17
|
-
setAnchorEl(event.currentTarget);
|
|
18
|
-
}
|
|
19
|
-
}, [ids, navigate]);
|
|
20
|
-
const handleClose = useCallback(() => setAnchorEl(null), []);
|
|
21
|
-
return (_jsxs(_Fragment, { children: [_jsx(TuiIconButton, { size: "small", tooltip: t(`hit.panel.bundles.open${ids.length > 1 ? '' : '.prompt'}`), onClick: onClick, disabled: disabled, "aria-disabled": disabled, "aria-haspopup": "true", "aria-controls": anchorEl ? 'bundle-action-menu' : undefined, "aria-expanded": anchorEl ? 'true' : undefined, children: _jsx(AccountTree, {}) }), _jsx(Menu, { id: "bundle-action-menu", anchorEl: anchorEl, open: !!anchorEl, onClose: handleClose, MenuListProps: {
|
|
22
|
-
dense: true,
|
|
23
|
-
'aria-labelledby': `bundle-button`
|
|
24
|
-
}, anchorOrigin: {
|
|
25
|
-
vertical: 'bottom',
|
|
26
|
-
horizontal: 'right'
|
|
27
|
-
}, transformOrigin: {
|
|
28
|
-
vertical: 'top',
|
|
29
|
-
horizontal: 'right'
|
|
30
|
-
}, children: ids.map(id => (_jsx(MenuItem, { onClick: () => navigate(`/bundles/${id}`), children: _jsx(ListItemText, { primary: t('hit.panel.bundles.open.prompt'), secondary: _jsx(Typography, { variant: "caption", color: "text.secondary", children: id }) }) }, id))) })] }));
|
|
31
|
-
};
|
|
32
|
-
export default BundleButton;
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
export default "# Integrations and Plugins\n\n> **Note:** This page is fallback documentation. In `Integrations.tsx`, when plugins provide integration views, those plugin tabs/content are rendered and this markdown is replaced.\n\nHowler plugins let you extend both UI behavior and rendering paths without modifying core screens directly. Plugins are installed through the plugin store and then invoked across the app through `executeFunction(...)` hooks.\n\n## How the plugin system works\n\n- `HowlerPlugin` is the base class that defines extension points.\n- `howlerPluginStore` keeps global plugin state (installed plugins, lead formats, pivot formats, operations, routes, menus, sitemap entries).\n- On activation, each plugin can register named functions in the runtime plugin store.\n- The app calls those functions via `pluginStore.executeFunction(...)` in specific locations.\n\nIn practice, this means plugins can contribute features incrementally rather than replacing full pages.\n\n## What plugins can add\n\nFrom `HowlerPlugin.ts` and store usage, plugins can provide:\n\n- **Lead formats** (`addLead`) with:\n\t- a lead editor form (`lead.<format>.form`)\n\t- a lead renderer (`lead.<format>`)\n- **Pivot formats** (`addPivot`) with:\n\t- a pivot form (`pivot.<format>.form`)\n\t- a pivot link renderer (`pivot.<format>`)\n- **Custom action operations** (`addOperation`) with:\n\t- operation editor UI (`operation.<id>`)\n\t- operation help docs (`operation.<id>.documentation`)\n- **Menu entries**:\n\t- user menu items\n\t- admin menu items\n\t- main menu insertions/dividers\n- **Routing/navigation**:\n\t- routes\n\t- sitemap entries and breadcrumbs behavior\n- **Global extension hooks**:\n\t- `provider()` wrapper for app-wide context\n\t- `setup()` startup logic\n\t- `localization(...)` translation bundles\n\t- `helpers()` custom handlebars helpers\n\t- `typography(...)` and `chip(...)` custom UI rendering\n\t- `actions(...)` hit actions\n\t- `status(...)` hit banner/status widgets\n\t- `support()`, `help()`, and section-specific `settings(...)`\n\t- `documentation(md)` markdown post-processing\n\t- `on(event, hit)` event callback\n\n## Where hooks are executed\n\n`executeFunction(...)` is used throughout the app to render plugin output at runtime, for example:\n\n- lead rendering and lead form editors\n- pivot rendering and pivot form editors\n- custom operation editors and docs\n- plugin actions in hit views/context menus\n- hit status/banner components\n- typography/chip wrappers\n- plugin providers and startup setup\n- settings sections (`admin`, `local`, `profile`, `security`)\n- help/support panels\n- markdown documentation transforms\n\n## Clue plugin example\n\nThe Clue plugin (`ui/src/plugins/clue/index.tsx`) demonstrates a typical plugin:\n\n- registers localization bundles in English/French\n- provides a plugin provider + setup hook\n- adds a custom lead format (`clue`) with:\n\t- a lead form component\n\t- a renderer that parses lead metadata and renders a `Fetcher`\n- adds a custom pivot format (`clue`) with form + renderer\n- provides custom handlebars helpers\n- overrides plugin typography/chip renderers\n\nThis is the main pattern to follow when adding a new integration.\n"
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
export default "# Int\u00e9grations et plugins\n\n> **Remarque :** cette page est une documentation de secours. Dans `Integrations.tsx`, quand des plugins fournissent des vues d\u2019int\u00e9gration, ces onglets/contenus plugins sont affich\u00e9s et ce markdown est remplac\u00e9.\n\nLes plugins Howler permettent d\u2019\u00e9tendre le comportement de l\u2019interface et le rendu sans modifier directement les \u00e9crans principaux. Les plugins sont install\u00e9s via le magasin de plugins, puis appel\u00e9s dans l\u2019application \u00e0 l\u2019aide des points d\u2019extension `executeFunction(...)`.\n\n## Fonctionnement du syst\u00e8me de plugins\n\n- `HowlerPlugin` est la classe de base qui d\u00e9finit les points d\u2019extension.\n- `howlerPluginStore` conserve l\u2019\u00e9tat global (plugins install\u00e9s, formats de lead, formats de pivot, op\u00e9rations, routes, menus, sitemap).\n- \u00c0 l\u2019activation, un plugin enregistre des fonctions nomm\u00e9es dans le magasin de plugins.\n- L\u2019application ex\u00e9cute ensuite ces fonctions via `pluginStore.executeFunction(...)` \u00e0 des endroits pr\u00e9cis.\n\nCe m\u00e9canisme permet d\u2019ajouter des capacit\u00e9s de fa\u00e7on incr\u00e9mentale, sans remplacer des pages compl\u00e8tes.\n\n## Ce qu\u2019un plugin peut ajouter\n\nD\u2019apr\u00e8s `HowlerPlugin.ts` et les usages du store, un plugin peut fournir :\n\n- **Formats de lead** (`addLead`) avec :\n\t- un formulaire d\u2019\u00e9dition (`lead.<format>.form`)\n\t- un rendu (`lead.<format>`)\n- **Formats de pivot** (`addPivot`) avec :\n\t- un formulaire (`pivot.<format>.form`)\n\t- un rendu de lien pivot (`pivot.<format>`)\n- **Op\u00e9rations d\u2019action personnalis\u00e9es** (`addOperation`) avec :\n\t- l\u2019UI d\u2019\u00e9dition de l\u2019op\u00e9ration (`operation.<id>`)\n\t- la documentation de l\u2019op\u00e9ration (`operation.<id>.documentation`)\n- **Entr\u00e9es de menu** :\n\t- menu utilisateur\n\t- menu administrateur\n\t- insertions/s\u00e9parateurs dans le menu principal\n- **Routage/navigation** :\n\t- routes\n\t- entr\u00e9es de sitemap et logique de fil d\u2019Ariane\n- **Points d\u2019extension globaux** :\n\t- `provider()` pour injecter un contexte global\n\t- `setup()` au d\u00e9marrage\n\t- `localization(...)` pour les traductions\n\t- `helpers()` pour les helpers handlebars\n\t- `typography(...)` et `chip(...)` pour le rendu UI\n\t- `actions(...)` pour les actions sur les hits\n\t- `status(...)` pour la banni\u00e8re/statut d\u2019un hit\n\t- `support()`, `help()` et `settings(...)` par section\n\t- `documentation(md)` pour post-traiter du markdown\n\t- `on(event, hit)` pour les \u00e9v\u00e9nements\n\n## O\u00f9 les hooks sont ex\u00e9cut\u00e9s\n\n`executeFunction(...)` est utilis\u00e9 dans plusieurs parties de l\u2019UI, notamment pour :\n\n- le rendu des leads et leurs formulaires\n- le rendu des pivots et leurs formulaires\n- les \u00e9diteurs d\u2019op\u00e9rations et leur documentation\n- les actions plugin dans les vues/context menus de hit\n- les composants de statut/banni\u00e8re des hits\n- les composants typographie/chip\n- les providers plugins et la logique `setup`\n- les sections de param\u00e8tres (`admin`, `local`, `profile`, `security`)\n- les vues d\u2019aide/support\n- la transformation de markdown de documentation\n\n## Exemple : plugin Clue\n\nLe plugin Clue (`ui/src/plugins/clue/index.tsx`) montre un exemple concret :\n\n- enregistre des bundles de traduction EN/FR\n- expose un provider et un hook de setup\n- ajoute un format de lead `clue` avec :\n\t- un composant de formulaire\n\t- un renderer qui lit les m\u00e9tadonn\u00e9es du lead et affiche un `Fetcher`\n- ajoute un format de pivot `clue` (formulaire + rendu)\n- fournit des helpers handlebars personnalis\u00e9s\n- fournit des rendus personnalis\u00e9s pour `typography` et `chip`\n\nC\u2019est le mod\u00e8le recommand\u00e9 pour d\u00e9velopper de nouvelles int\u00e9grations.\n"
|
|
@@ -1,12 +0,0 @@
|
|
|
1
|
-
import { jsx as _jsx } from "react/jsx-runtime";
|
|
2
|
-
import Markdown from '@cccsaurora/howler-ui/components/elements/display/Markdown';
|
|
3
|
-
import { useMemo } from 'react';
|
|
4
|
-
import { useTranslation } from 'react-i18next';
|
|
5
|
-
import BUNDLES_EN from './markdown/en/bundles.md';
|
|
6
|
-
import BUNDLES_FR from './markdown/fr/bundles.md';
|
|
7
|
-
const BundleDocumentation = () => {
|
|
8
|
-
const { i18n } = useTranslation();
|
|
9
|
-
const md = useMemo(() => (i18n.language === 'en' ? BUNDLES_EN : BUNDLES_FR), [i18n.language]);
|
|
10
|
-
return _jsx(Markdown, { md: md });
|
|
11
|
-
};
|
|
12
|
-
export default BundleDocumentation;
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
export default "<!-- docs/ingestion/bundles.md -->\n\n# Howler Hit Bundles\n\nHit bundles can be used to easily package together a large number of similar alerts, allowing analysts to easily triage them as a single incident. For example, consider a single computer that repeatedly makes a network call to `baddomain.ru` - while an alert may be generated for every instance of this computer hitting that domain, it makes sense for analysts to treat all these alerts as a single case.\n\n## Creating bundles through the Howler Client\n\nThere are a couple of ways to create a bundle through the howler client:\n\n```python\nfrom howler_client import get_client\n\nhowler = get_client(\"https://howler.dev.analysis.cyber.gc.ca\")\n\n\"\"\"Creating a howler bundle and the hits at the same time\"\"\"\nhowler.bundle.create(\n # First argument is the bundle hit\n {\n \"howler.analytic\": \"example-test\",\n \"howler.score\": 0\n },\n # Second argument is a hit or list of hits to include in the bundle\n [\n {\n \"howler.analytic\": \"example-test\",\n \"howler.score\": 0\n },\n {\n \"howler.analytic\": \"example-test\",\n \"howler.score\": 0\n }\n ]\n)\n\n\"\"\"Creating a howler bundle from existing hits\"\"\"\nhowler.bundle.create(\n {\n \"howler.analytic\": \"example-test\",\n \"howler.score\": 0,\n \"howler.hits\": [\"YcUsL8QsjmwwIdstieROk\", \"6s7MztwuSvz6tM0PgGJhvz\"]\n },\n # Note: In future releases, you won't need to include this argument\n []\n)\n\n\n\"\"\"Creating from a map\"\"\"\nbundle_hit = {\n \"score\": 0,\n \"bundle\": True\n}\n\nmap = {\n \"score\": [\"howler.score\"],\n \"bundle\": [\"howler.is_bundle\"]\n}\n\nhowler.bundle.create_from_map(\"example-test\", bundle_hit, map, [{\"score\": 0}])\n```\n\n## Viewing bundles on the Howler UI\n\nIn order to view created bundles on the Howler UI, you can use the query `howler.is_bundle:true`. This will provide a list of created bundles you can look through.\n\nClicking on a bundle will open up a slightly different search UI to normal. In this case, we automatically filter the search results to include only hits that are included in the bundle. To make this obvious, the header representing the bundle will appear above the search bar.\n\nYou can continue to filter through hits using the same queries as usual, and view them as usual. When triaging a bundle, assessing it will apply this assessment to all hits in the bundle, **except those that have already been triaged**. That is, if the bundle is open, all open hits will be assessed when you assess it.\n\nBundles also have a **Summary** tab not available for regular hits. This summary tab will aid you in aggregating data about all the hits in the bundle. Simply open the tab and click \"Create Summary\". Note that this may take some time, as a large number of queries are being run to aggregate the data.\n"
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
export default "<!-- docs/ingestion/bundles.fr.md -->\n\n# Les groupes des hits Howler\n\nLes groupes des hits peuvent \u00eatre utilis\u00e9s pour regrouper facilement un grand nombre d'alertes similaires, ce qui permet aux analystes de les traiter comme un seul incident. Prenons l'exemple d'un ordinateur qui effectue \u00e0 plusieurs reprises un appel r\u00e9seau vers `baddomain.ru` - bien qu'une alerte puisse \u00eatre g\u00e9n\u00e9r\u00e9e pour chaque cas o\u00f9 cet ordinateur acc\u00e8de \u00e0 ce domaine, il est logique que les analystes traitent toutes ces alertes comme un seul et m\u00eame cas.\n\n## Cr\u00e9ation de groupes via le client Howler\n\nIl y a plusieurs fa\u00e7ons de cr\u00e9er un groupe via le client Howler:\n\n```python\nfrom howler_client import get_client\n\nhowler = get_client(\"https://howler.dev.analysis.cyber.gc.ca\")\n\n\"\"\"Cr\u00e9ation simultan\u00e9e d'un groupe howler et de hits\"\"\"\nhowler.bundle.create(\n # Le premier argument est le hit de l'offre group\u00e9e\n {\n \"howler.analytic\": \"example-test\",\n \"howler.score\": 0\n },\n # Le deuxi\u00e8me argument est un hit ou une liste de hits \u00e0 inclure dans l'offre group\u00e9e.\n [\n {\n \"howler.analytic\": \"example-test\",\n \"howler.score\": 0\n },\n {\n \"howler.analytic\": \"example-test\",\n \"howler.score\": 0\n }\n ]\n)\n\n\"\"\"Cr\u00e9ation d'un groupe howler \u00e0 partir de hits existants\"\"\"\nhowler.bundle.create(\n {\n \"howler.analytic\": \"example-test\",\n \"howler.score\": 0,\n \"howler.hits\": [\"YcUsL8QsjmwwIdstieROk\", \"6s7MztwuSvz6tM0PgGJhvz\"]\n },\n # Noter: Dans les prochaines versions, vous n'aurez plus besoin d'inclure cet argument.\n []\n)\n\n\n\"\"\"Cr\u00e9ation \u00e0 partir d'une carte\"\"\"\nbundle_hit = {\n \"score\": 0,\n \"bundle\": True\n}\n\nmap = {\n \"score\": [\"howler.score\"],\n \"bundle\": [\"howler.is_bundle\"]\n}\n\nhowler.bundle.create_from_map(\"example-test\", bundle_hit, map, [{\"score\": 0}])\n```\n\n## Visualiser les groupes sur l'interface utilisateur de Howler\n\nAfin de visualiser les groupes cr\u00e9\u00e9s sur l'interface utilisateur de Howler, vous pouvez utiliser la requ\u00eate `howler.is_bundle:true`. Cela fournira une liste de groupes cr\u00e9\u00e9s que vous pourrez consulter.\n\nEn cliquant sur un groupe, vous ouvrirez une interface de recherche l\u00e9g\u00e8rement diff\u00e9rente de l'interface normale. Dans ce cas, nous filtrons automatiquement les r\u00e9sultats de la recherche pour n'inclure que les r\u00e9sultats inclus dans le groupe. Pour que cela soit \u00e9vident, l'en-t\u00eate repr\u00e9sentant le groupe appara\u00eet au-dessus de la barre de recherche.\n\nVous pouvez continuer \u00e0 filtrer les r\u00e9sultats en utilisant les m\u00eames requ\u00eates que d'habitude et \u00e0 les visualiser comme d'habitude. Lors du triage d'un groupe, son \u00e9valuation s'appliquera \u00e0 tous les hits du groupe, **sauf ceux qui ont d\u00e9j\u00e0 \u00e9t\u00e9 tri\u00e9s**. En d'autres termes, si le groupe est ouvert, tous les hits ouverts seront \u00e9valu\u00e9s lorsque vous l'\u00e9valuerez.\n\nLes groupes disposent \u00e9galement d'un onglet **R\u00e9sum\u00e9** qui n'est pas disponible pour les hits ordinaires. Cet onglet vous aidera \u00e0 regrouper les donn\u00e9es relatives \u00e0 tous les r\u00e9sultats du groupe. Il suffit d'ouvrir l'onglet et de cliquer sur \"Cr\u00e9er un sommaire\". Notez que cette op\u00e9ration peut prendre un certain temps, car un grand nombre de requ\u00eates sont ex\u00e9cut\u00e9es pour agr\u00e9ger les donn\u00e9es.\n"
|
|
@@ -1,32 +0,0 @@
|
|
|
1
|
-
import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-runtime";
|
|
2
|
-
import { AccountTree } from '@mui/icons-material';
|
|
3
|
-
import { IconButton, Paper, Popover, Skeleton, Stack, Tooltip } from '@mui/material';
|
|
4
|
-
import api from '@cccsaurora/howler-ui/api';
|
|
5
|
-
import HowlerCard from '@cccsaurora/howler-ui/components/elements/display/HowlerCard';
|
|
6
|
-
import HitBanner from '@cccsaurora/howler-ui/components/elements/hit/HitBanner';
|
|
7
|
-
import { HitLayout } from '@cccsaurora/howler-ui/components/elements/hit/HitLayout';
|
|
8
|
-
import { useCallback, useEffect, useState } from 'react';
|
|
9
|
-
import { useTranslation } from 'react-i18next';
|
|
10
|
-
import { useNavigate } from 'react-router-dom';
|
|
11
|
-
const BundleParentMenu = ({ bundle }) => {
|
|
12
|
-
const { t } = useTranslation();
|
|
13
|
-
const navigate = useNavigate();
|
|
14
|
-
const [parentAnchor, setParentAnchor] = useState(null);
|
|
15
|
-
const [parentHits, setParentHits] = useState([]);
|
|
16
|
-
const onSelect = useCallback((bundleId) => {
|
|
17
|
-
navigate(`/bundles/${bundleId}?span=date.range.all&query=howler.id%3A*`);
|
|
18
|
-
setParentAnchor(null);
|
|
19
|
-
}, [navigate]);
|
|
20
|
-
useEffect(() => {
|
|
21
|
-
if (!parentAnchor) {
|
|
22
|
-
return;
|
|
23
|
-
}
|
|
24
|
-
api.search.hit
|
|
25
|
-
.post({ query: `howler.id:(${bundle.howler.bundles.join(' OR ')})` })
|
|
26
|
-
.then(response => setParentHits(response.items));
|
|
27
|
-
}, [bundle.howler.bundles, parentAnchor]);
|
|
28
|
-
return (_jsxs(_Fragment, { children: [_jsx(Tooltip, { title: t('hit.bundle.parents.show'), children: _jsx(IconButton, { size: "small", onClick: event => setParentAnchor(event.currentTarget), children: _jsx(AccountTree, { fontSize: "small" }) }) }), _jsx(Popover, { open: !!parentAnchor, anchorEl: parentAnchor, anchorOrigin: { vertical: 'top', horizontal: 'left' }, transformOrigin: { horizontal: 'right', vertical: 'top' }, onClose: () => setParentAnchor(null), children: _jsx(Paper, { sx: { p: 1, minWidth: '750px' }, children: _jsx(Stack, { spacing: 1, children: parentHits.length < 1
|
|
29
|
-
? bundle.howler.bundles.map(id => _jsx(Skeleton, { variant: "rounded", height: "100px" }, id))
|
|
30
|
-
: parentHits.map(parent => (_jsx(HowlerCard, { sx: { p: 1, cursor: 'pointer' }, onClick: () => onSelect(parent.howler.id), children: _jsx(HitBanner, { hit: parent, layout: HitLayout.DENSE }) }, parent.howler.id))) }) }) })] }));
|
|
31
|
-
};
|
|
32
|
-
export default BundleParentMenu;
|
|
File without changes
|