@cccsaurora/howler-ui 2.17.0-dev.563 → 2.17.0-dev.600
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/api/index.d.ts +2 -0
- package/api/index.js +4 -2
- package/api/search/case.d.ts +4 -0
- package/api/search/case.js +8 -0
- package/api/search/index.d.ts +2 -1
- package/api/search/index.js +2 -1
- package/api/v2/case/index.d.ts +6 -0
- package/api/v2/case/index.js +18 -0
- package/api/v2/index.d.ts +4 -0
- package/api/v2/index.js +6 -0
- package/api/v2/search/facet.d.ts +3 -0
- package/api/v2/search/facet.js +12 -0
- package/api/v2/search/index.d.ts +5 -0
- package/api/v2/search/index.js +24 -0
- package/commons/components/leftnav/LeftNavDrawer.js +1 -1
- package/components/app/App.js +14 -0
- package/components/app/providers/FavouritesProvider.js +2 -2
- package/components/app/providers/HitSearchProvider.d.ts +0 -1
- package/components/app/providers/HitSearchProvider.js +6 -11
- package/components/app/providers/HitSearchProvider.test.js +11 -32
- package/components/app/providers/ParameterProvider.d.ts +9 -2
- package/components/app/providers/ParameterProvider.js +165 -240
- package/components/app/providers/ParameterProvider.test.js +307 -14
- package/components/{routes/overviews/OverviewEditor.js → elements/MarkdownEditor.js} +3 -3
- package/components/elements/ObjectDetails.d.ts +6 -0
- package/components/elements/{hit/HitDetails.js → ObjectDetails.js} +17 -17
- package/components/elements/PluginTypography.d.ts +2 -1
- package/components/elements/PluginTypography.js +3 -2
- package/components/elements/UserList.d.ts +5 -2
- package/components/elements/UserList.js +14 -5
- package/components/elements/addons/search/phrase/Phrase.js +1 -1
- package/components/elements/case/CaseCard.d.ts +8 -0
- package/components/elements/case/CaseCard.js +39 -0
- package/components/elements/case/CasePreview.d.ts +6 -0
- package/components/elements/case/CasePreview.js +17 -0
- package/components/elements/case/StatusIcon.d.ts +5 -0
- package/components/elements/case/StatusIcon.js +13 -0
- package/components/elements/display/ChipPopper.d.ts +1 -0
- package/components/elements/display/ChipPopper.js +2 -2
- package/components/elements/display/HowlerCard.js +1 -1
- package/components/elements/display/Modal.js +1 -0
- package/components/elements/hit/HitBanner.js +28 -48
- package/components/elements/hit/HitCard.js +1 -1
- package/components/elements/hit/HitLinks.js +5 -3
- package/components/elements/hit/{HitQuickSearch.d.ts → HitPreview.d.ts} +3 -3
- package/components/elements/hit/{HitQuickSearch.js → HitPreview.js} +10 -4
- package/components/elements/hit/HitRelated.d.ts +1 -1
- package/components/elements/hit/HitRelated.js +30 -3
- package/components/elements/hit/elements/AnalyticLink.d.ts +8 -0
- package/components/elements/hit/elements/AnalyticLink.js +22 -0
- package/components/elements/hit/outlines/DefaultOutline.js +1 -1
- package/components/elements/hit/related/RelatedRecords.js +63 -0
- package/components/elements/observable/ObservableCard.d.ts +5 -0
- package/components/elements/observable/ObservableCard.js +7 -0
- package/components/elements/observable/ObservablePreview.d.ts +6 -0
- package/components/elements/observable/ObservablePreview.js +12 -0
- package/components/elements/view/ViewTitle.js +1 -1
- package/components/hooks/useHitActions.d.ts +1 -1
- package/components/hooks/useHitActions.js +2 -2
- package/components/hooks/useHitSelection.js +3 -24
- package/components/hooks/useMyPreferences.js +10 -1
- package/components/hooks/useMySearch.js +2 -2
- package/components/hooks/useMySitemap.js +4 -1
- package/components/hooks/useMyTheme.js +9 -2
- package/components/hooks/useRelatedRecords.d.ts +13 -0
- package/components/hooks/useRelatedRecords.js +32 -0
- package/components/routes/action/view/ActionSearch.js +1 -1
- package/components/routes/advanced/QueryBuilder.js +1 -1
- package/components/routes/analytics/AnalyticDetails.js +2 -2
- package/components/routes/analytics/AnalyticSearch.js +1 -1
- package/components/routes/cases/CaseViewer.d.ts +2 -0
- package/components/routes/cases/CaseViewer.js +24 -0
- package/components/routes/cases/Cases.d.ts +2 -0
- package/components/routes/cases/Cases.js +101 -0
- package/components/routes/cases/constants.d.ts +5 -0
- package/components/routes/cases/constants.js +5 -0
- package/components/routes/cases/detail/AlertPanel.d.ts +6 -0
- package/components/routes/cases/detail/AlertPanel.js +32 -0
- package/components/routes/cases/detail/CaseDashboard.d.ts +7 -0
- package/components/routes/cases/detail/CaseDashboard.js +49 -0
- package/components/routes/cases/detail/CaseDetails.d.ts +6 -0
- package/components/routes/cases/detail/CaseDetails.js +61 -0
- package/components/routes/cases/detail/CaseOverview.d.ts +7 -0
- package/components/routes/cases/detail/CaseOverview.js +43 -0
- package/components/routes/cases/detail/CaseSidebar.d.ts +6 -0
- package/components/routes/cases/detail/CaseSidebar.js +36 -0
- package/components/routes/cases/detail/CaseTask.d.ts +11 -0
- package/components/routes/cases/detail/CaseTask.js +57 -0
- package/components/routes/cases/detail/ItemPage.d.ts +6 -0
- package/components/routes/cases/detail/ItemPage.js +93 -0
- package/components/routes/cases/detail/RelatedCasePanel.d.ts +6 -0
- package/components/routes/cases/detail/RelatedCasePanel.js +31 -0
- package/components/routes/cases/detail/TaskPanel.d.ts +7 -0
- package/components/routes/cases/detail/TaskPanel.js +52 -0
- package/components/routes/cases/detail/aggregates/CaseAggregate.d.ts +12 -0
- package/components/routes/cases/detail/aggregates/CaseAggregate.js +19 -0
- package/components/routes/cases/detail/aggregates/SourceAggregate.d.ts +6 -0
- package/components/routes/cases/detail/aggregates/SourceAggregate.js +27 -0
- package/components/routes/cases/detail/sidebar/CaseFolder.d.ts +12 -0
- package/components/routes/cases/detail/sidebar/CaseFolder.js +179 -0
- package/components/routes/cases/detail/sidebar/types.d.ts +3 -0
- package/components/routes/cases/hooks/useCase.d.ts +13 -0
- package/components/routes/cases/hooks/useCase.js +38 -0
- package/components/routes/cases/modals/ResolveModal.d.ts +7 -0
- package/components/routes/cases/modals/ResolveModal.js +59 -0
- package/components/routes/help/ApiDocumentation.js +1 -1
- package/components/routes/help/HitDocumentation.js +1 -3
- package/components/routes/hits/search/HitContextMenu.js +3 -2
- package/components/routes/hits/search/InformationPane.d.ts +1 -0
- package/components/routes/hits/search/InformationPane.js +6 -28
- package/components/routes/hits/search/QuerySettings.js +2 -1
- package/components/routes/hits/search/QuerySettings.test.js +14 -9
- package/components/routes/hits/search/SearchPane.js +7 -32
- package/components/routes/hits/search/ViewLink.js +1 -1
- package/components/routes/hits/search/grid/EnhancedCell.js +1 -1
- package/components/routes/hits/search/shared/IndexPicker.d.ts +2 -0
- package/components/routes/hits/search/shared/IndexPicker.js +20 -0
- package/components/routes/hits/view/HitViewer.js +3 -4
- package/components/routes/home/ViewCard.js +1 -1
- package/components/routes/observables/ObservableViewer.d.ts +7 -0
- package/components/routes/observables/ObservableViewer.js +27 -0
- package/components/routes/overviews/OverviewViewer.js +2 -2
- package/locales/en/translation.json +437 -398
- package/locales/fr/translation.json +442 -408
- package/models/WithMetadata.d.ts +2 -1
- package/models/entities/generated/AttachmentsFile.d.ts +12 -0
- package/models/entities/generated/Case.d.ts +28 -0
- package/models/entities/generated/DestinationOriginal.d.ts +19 -0
- package/models/entities/generated/EmailAttachment.d.ts +8 -0
- package/models/entities/generated/EmailParent.d.ts +19 -0
- package/models/entities/generated/Enrichments.d.ts +7 -0
- package/models/entities/generated/EnrichmentsIndicator.d.ts +21 -0
- package/models/entities/generated/Howler.d.ts +0 -4
- package/models/entities/generated/HttpResponse.d.ts +11 -0
- package/models/entities/generated/Item.d.ts +9 -0
- package/models/entities/generated/Observable.d.ts +84 -0
- package/models/entities/generated/ObservableCloud.d.ts +20 -0
- package/models/entities/generated/ObservableDestination.d.ts +23 -0
- package/models/entities/generated/ObservableEmail.d.ts +30 -0
- package/models/entities/generated/ObservableFile.d.ts +36 -0
- package/models/entities/generated/ObservableHowler.d.ts +44 -0
- package/models/entities/generated/ObservableHttp.d.ts +11 -0
- package/models/entities/generated/ObservableObserver.d.ts +21 -0
- package/models/entities/generated/ObservableOrganization.d.ts +7 -0
- package/models/entities/generated/ObservableProcess.d.ts +34 -0
- package/models/entities/generated/ObservableSource.d.ts +23 -0
- package/models/entities/generated/ObservableThreat.d.ts +21 -0
- package/models/entities/generated/ObservableTls.d.ts +12 -0
- package/models/entities/generated/ObserverIngress.d.ts +9 -0
- package/models/entities/generated/Rule.d.ts +2 -10
- package/models/entities/generated/Task.d.ts +10 -0
- package/models/entities/generated/Threat.d.ts +2 -2
- package/models/entities/generated/{Enrichment.d.ts → ThreatEnrichment.d.ts} +1 -1
- package/package.json +16 -1
- package/plugins/clue/components/ClueTypography.js +2 -2
- package/plugins/clue/utils.d.ts +2 -1
- package/utils/constants.d.ts +3 -3
- package/utils/typeUtils.d.ts +7 -0
- package/utils/typeUtils.js +18 -0
- package/components/elements/display/icons/BundleButton.d.ts +0 -6
- package/components/elements/display/icons/BundleButton.js +0 -32
- package/components/routes/help/BundleDocumentation.d.ts +0 -3
- package/components/routes/help/BundleDocumentation.js +0 -12
- package/components/routes/help/markdown/en/bundles.md.js +0 -1
- package/components/routes/help/markdown/fr/bundles.md.js +0 -1
- package/components/routes/hits/search/BundleParentMenu.d.ts +0 -6
- package/components/routes/hits/search/BundleParentMenu.js +0 -32
- /package/components/{routes/overviews/OverviewEditor.d.ts → elements/MarkdownEditor.d.ts} +0 -0
- /package/components/elements/hit/{HitDetails.d.ts → related/RelatedRecords.d.ts} +0 -0
package/models/WithMetadata.d.ts
CHANGED
|
@@ -4,9 +4,10 @@ import type { Overview } from './entities/generated/Overview';
|
|
|
4
4
|
import type { Template } from './entities/generated/Template';
|
|
5
5
|
|
|
6
6
|
export type WithMetadata<T> = T & {
|
|
7
|
+
__index?: string;
|
|
8
|
+
|
|
7
9
|
__analytic?: Analytic;
|
|
8
10
|
__overview?: Overview;
|
|
9
11
|
__template?: Template;
|
|
10
|
-
|
|
11
12
|
__dossiers?: Dossier[];
|
|
12
13
|
};
|
|
@@ -0,0 +1,12 @@
|
|
|
1
|
+
import type { FileHash } from './FileHash';
|
|
2
|
+
|
|
3
|
+
/**
|
|
4
|
+
* NOTE: This is an auto-generated file. Don't edit this manually.
|
|
5
|
+
*/
|
|
6
|
+
export interface AttachmentsFile {
|
|
7
|
+
extension?: string;
|
|
8
|
+
hash?: FileHash;
|
|
9
|
+
mime_type?: string;
|
|
10
|
+
name?: string;
|
|
11
|
+
size?: number;
|
|
12
|
+
}
|
|
@@ -0,0 +1,28 @@
|
|
|
1
|
+
import type { Enrichments } from './Enrichments';
|
|
2
|
+
import type { Item } from './Item';
|
|
3
|
+
import type { Rule } from './Rule';
|
|
4
|
+
import type { Task } from './Task';
|
|
5
|
+
|
|
6
|
+
/**
|
|
7
|
+
* NOTE: This is an auto-generated file. Don't edit this manually.
|
|
8
|
+
*/
|
|
9
|
+
export interface Case {
|
|
10
|
+
case_id?: string;
|
|
11
|
+
created?: string;
|
|
12
|
+
end?: string;
|
|
13
|
+
enrichments?: Enrichments;
|
|
14
|
+
escalation?: string;
|
|
15
|
+
indicators?: string[];
|
|
16
|
+
items?: Item[];
|
|
17
|
+
overview?: string;
|
|
18
|
+
participants?: string[];
|
|
19
|
+
rules?: Rule[];
|
|
20
|
+
status?: string;
|
|
21
|
+
start?: string;
|
|
22
|
+
summary?: string;
|
|
23
|
+
targets?: string[];
|
|
24
|
+
tasks?: Task[];
|
|
25
|
+
threats?: string[];
|
|
26
|
+
title?: string;
|
|
27
|
+
updated?: string;
|
|
28
|
+
}
|
|
@@ -0,0 +1,19 @@
|
|
|
1
|
+
import type { AutonomousSystems } from './AutonomousSystems';
|
|
2
|
+
import type { Geo } from './Geo';
|
|
3
|
+
import type { Nat } from './Nat';
|
|
4
|
+
|
|
5
|
+
/**
|
|
6
|
+
* NOTE: This is an auto-generated file. Don't edit this manually.
|
|
7
|
+
*/
|
|
8
|
+
export interface DestinationOriginal {
|
|
9
|
+
address?: string;
|
|
10
|
+
autonomous_systems?: AutonomousSystems;
|
|
11
|
+
bytes?: number;
|
|
12
|
+
domain?: string;
|
|
13
|
+
geo?: Geo;
|
|
14
|
+
ip?: string;
|
|
15
|
+
mac?: string;
|
|
16
|
+
nat?: Nat;
|
|
17
|
+
packets?: number;
|
|
18
|
+
port?: number;
|
|
19
|
+
}
|
|
@@ -0,0 +1,19 @@
|
|
|
1
|
+
import type { Bcc } from './Bcc';
|
|
2
|
+
import type { Cc } from './Cc';
|
|
3
|
+
import type { From } from './From';
|
|
4
|
+
import type { To } from './To';
|
|
5
|
+
|
|
6
|
+
/**
|
|
7
|
+
* NOTE: This is an auto-generated file. Don't edit this manually.
|
|
8
|
+
*/
|
|
9
|
+
export interface EmailParent {
|
|
10
|
+
bcc?: Bcc;
|
|
11
|
+
cc?: Cc;
|
|
12
|
+
destination?: string;
|
|
13
|
+
from?: From;
|
|
14
|
+
message_id?: string;
|
|
15
|
+
origination_timestamp?: string;
|
|
16
|
+
source?: string;
|
|
17
|
+
subject?: string;
|
|
18
|
+
to?: To;
|
|
19
|
+
}
|
|
@@ -0,0 +1,21 @@
|
|
|
1
|
+
import type { IndicatorEmail } from './IndicatorEmail';
|
|
2
|
+
import type { IndicatorFile } from './IndicatorFile';
|
|
3
|
+
|
|
4
|
+
/**
|
|
5
|
+
* NOTE: This is an auto-generated file. Don't edit this manually.
|
|
6
|
+
*/
|
|
7
|
+
export interface EnrichmentsIndicator {
|
|
8
|
+
confidence?: string;
|
|
9
|
+
description?: string;
|
|
10
|
+
email?: IndicatorEmail;
|
|
11
|
+
file?: IndicatorFile;
|
|
12
|
+
first_seen?: string;
|
|
13
|
+
ip?: string;
|
|
14
|
+
last_seen?: string;
|
|
15
|
+
port?: number;
|
|
16
|
+
provider?: string;
|
|
17
|
+
reference?: string;
|
|
18
|
+
scanner_stats?: number;
|
|
19
|
+
sightings?: number;
|
|
20
|
+
type?: string;
|
|
21
|
+
}
|
|
@@ -14,8 +14,6 @@ export interface Howler {
|
|
|
14
14
|
analytic: string;
|
|
15
15
|
assessment?: string;
|
|
16
16
|
assignment: string;
|
|
17
|
-
bundle_size?: number;
|
|
18
|
-
bundles?: string[];
|
|
19
17
|
comment?: HowlerComment[];
|
|
20
18
|
confidence?: number;
|
|
21
19
|
data?: string[];
|
|
@@ -24,10 +22,8 @@ export interface Howler {
|
|
|
24
22
|
escalation?: string;
|
|
25
23
|
expiry?: string;
|
|
26
24
|
hash: string;
|
|
27
|
-
hits?: string[];
|
|
28
25
|
id: string;
|
|
29
26
|
incidents?: Incident[];
|
|
30
|
-
is_bundle?: boolean;
|
|
31
27
|
labels?: Labels;
|
|
32
28
|
links?: Link[];
|
|
33
29
|
log?: Log[];
|
|
@@ -0,0 +1,84 @@
|
|
|
1
|
+
import type { Agent } from './Agent';
|
|
2
|
+
import type { Assemblyline } from './Assemblyline';
|
|
3
|
+
import type { Aws } from './Aws';
|
|
4
|
+
import type { Azure } from './Azure';
|
|
5
|
+
import type { Cbs } from './Cbs';
|
|
6
|
+
import type { Clue } from './Clue';
|
|
7
|
+
import type { Container } from './Container';
|
|
8
|
+
import type { Dns } from './Dns';
|
|
9
|
+
import type { Ecs } from './Ecs';
|
|
10
|
+
import type { Error } from './Error';
|
|
11
|
+
import type { Event } from './Event';
|
|
12
|
+
import type { Faas } from './Faas';
|
|
13
|
+
import type { Gcp } from './Gcp';
|
|
14
|
+
import type { Group } from './Group';
|
|
15
|
+
import type { Host } from './Host';
|
|
16
|
+
import type { Interface } from './Interface';
|
|
17
|
+
import type { Network } from './Network';
|
|
18
|
+
import type { ObservableCloud } from './ObservableCloud';
|
|
19
|
+
import type { ObservableDestination } from './ObservableDestination';
|
|
20
|
+
import type { ObservableEmail } from './ObservableEmail';
|
|
21
|
+
import type { ObservableFile } from './ObservableFile';
|
|
22
|
+
import type { ObservableHowler } from './ObservableHowler';
|
|
23
|
+
import type { ObservableHttp } from './ObservableHttp';
|
|
24
|
+
import type { ObservableObserver } from './ObservableObserver';
|
|
25
|
+
import type { ObservableOrganization } from './ObservableOrganization';
|
|
26
|
+
import type { ObservableProcess } from './ObservableProcess';
|
|
27
|
+
import type { ObservableSource } from './ObservableSource';
|
|
28
|
+
import type { ObservableThreat } from './ObservableThreat';
|
|
29
|
+
import type { ObservableTls } from './ObservableTls';
|
|
30
|
+
import type { Registry } from './Registry';
|
|
31
|
+
import type { Related } from './Related';
|
|
32
|
+
import type { Rule } from './Rule';
|
|
33
|
+
import type { Server } from './Server';
|
|
34
|
+
import type { Url } from './Url';
|
|
35
|
+
import type { User } from './User';
|
|
36
|
+
import type { UserAgent } from './UserAgent';
|
|
37
|
+
import type { Vulnerability } from './Vulnerability';
|
|
38
|
+
|
|
39
|
+
/**
|
|
40
|
+
* NOTE: This is an auto-generated file. Don't edit this manually.
|
|
41
|
+
*/
|
|
42
|
+
export interface Observable {
|
|
43
|
+
agent?: Agent;
|
|
44
|
+
assemblyline?: Assemblyline;
|
|
45
|
+
aws?: Aws;
|
|
46
|
+
azure?: Azure;
|
|
47
|
+
cbs?: Cbs;
|
|
48
|
+
cloud?: ObservableCloud;
|
|
49
|
+
clue?: Clue;
|
|
50
|
+
container?: Container;
|
|
51
|
+
destination?: ObservableDestination;
|
|
52
|
+
dns?: Dns;
|
|
53
|
+
ecs?: Ecs;
|
|
54
|
+
email?: ObservableEmail;
|
|
55
|
+
error?: Error;
|
|
56
|
+
event?: Event;
|
|
57
|
+
faas?: Faas;
|
|
58
|
+
file?: ObservableFile;
|
|
59
|
+
gcp?: Gcp;
|
|
60
|
+
group?: Group;
|
|
61
|
+
host?: Host;
|
|
62
|
+
howler: ObservableHowler;
|
|
63
|
+
http?: ObservableHttp;
|
|
64
|
+
interface?: Interface;
|
|
65
|
+
labels?: { [index: string]: string };
|
|
66
|
+
message?: string;
|
|
67
|
+
network?: Network;
|
|
68
|
+
observer?: ObservableObserver;
|
|
69
|
+
organization?: ObservableOrganization;
|
|
70
|
+
process?: ObservableProcess;
|
|
71
|
+
registry?: Registry;
|
|
72
|
+
related?: Related;
|
|
73
|
+
rule?: Rule;
|
|
74
|
+
server?: Server;
|
|
75
|
+
source?: ObservableSource;
|
|
76
|
+
tags?: string[];
|
|
77
|
+
threat?: ObservableThreat;
|
|
78
|
+
timestamp: string;
|
|
79
|
+
tls?: ObservableTls;
|
|
80
|
+
url?: Url;
|
|
81
|
+
user?: User;
|
|
82
|
+
user_agent?: UserAgent;
|
|
83
|
+
vulnerability?: Vulnerability;
|
|
84
|
+
}
|
|
@@ -0,0 +1,20 @@
|
|
|
1
|
+
import type { CloudAccount } from './CloudAccount';
|
|
2
|
+
import type { Instance } from './Instance';
|
|
3
|
+
import type { Machine } from './Machine';
|
|
4
|
+
import type { Project } from './Project';
|
|
5
|
+
import type { Service } from './Service';
|
|
6
|
+
|
|
7
|
+
/**
|
|
8
|
+
* NOTE: This is an auto-generated file. Don't edit this manually.
|
|
9
|
+
*/
|
|
10
|
+
export interface ObservableCloud {
|
|
11
|
+
account?: CloudAccount;
|
|
12
|
+
availability_zone?: string;
|
|
13
|
+
instance?: Instance;
|
|
14
|
+
machine?: Machine;
|
|
15
|
+
project?: Project;
|
|
16
|
+
provider?: string;
|
|
17
|
+
region?: string;
|
|
18
|
+
service?: Service;
|
|
19
|
+
tenant_id?: string;
|
|
20
|
+
}
|
|
@@ -0,0 +1,23 @@
|
|
|
1
|
+
import type { AutonomousSystems } from './AutonomousSystems';
|
|
2
|
+
import type { DestinationOriginal } from './DestinationOriginal';
|
|
3
|
+
import type { Geo } from './Geo';
|
|
4
|
+
import type { Nat } from './Nat';
|
|
5
|
+
import type { User } from './User';
|
|
6
|
+
|
|
7
|
+
/**
|
|
8
|
+
* NOTE: This is an auto-generated file. Don't edit this manually.
|
|
9
|
+
*/
|
|
10
|
+
export interface ObservableDestination {
|
|
11
|
+
address?: string;
|
|
12
|
+
autonomous_systems?: AutonomousSystems;
|
|
13
|
+
bytes?: number;
|
|
14
|
+
domain?: string;
|
|
15
|
+
geo?: Geo;
|
|
16
|
+
ip?: string;
|
|
17
|
+
mac?: string;
|
|
18
|
+
nat?: Nat;
|
|
19
|
+
original?: DestinationOriginal;
|
|
20
|
+
packets?: number;
|
|
21
|
+
port?: number;
|
|
22
|
+
user?: User;
|
|
23
|
+
}
|
|
@@ -0,0 +1,30 @@
|
|
|
1
|
+
import type { Bcc } from './Bcc';
|
|
2
|
+
import type { Cc } from './Cc';
|
|
3
|
+
import type { EmailAttachment } from './EmailAttachment';
|
|
4
|
+
import type { EmailParent } from './EmailParent';
|
|
5
|
+
import type { From } from './From';
|
|
6
|
+
import type { ReplyTo } from './ReplyTo';
|
|
7
|
+
import type { Sender } from './Sender';
|
|
8
|
+
import type { To } from './To';
|
|
9
|
+
|
|
10
|
+
/**
|
|
11
|
+
* NOTE: This is an auto-generated file. Don't edit this manually.
|
|
12
|
+
*/
|
|
13
|
+
export interface ObservableEmail {
|
|
14
|
+
attachments?: EmailAttachment[];
|
|
15
|
+
bcc?: Bcc;
|
|
16
|
+
cc?: Cc;
|
|
17
|
+
content_type?: string;
|
|
18
|
+
delivery_timestamp?: string;
|
|
19
|
+
direction?: string;
|
|
20
|
+
from?: From;
|
|
21
|
+
local_id?: string;
|
|
22
|
+
message_id?: string;
|
|
23
|
+
origination_timestamp?: string;
|
|
24
|
+
parent?: EmailParent;
|
|
25
|
+
reply_to?: ReplyTo;
|
|
26
|
+
sender?: Sender;
|
|
27
|
+
subject?: string;
|
|
28
|
+
to?: To;
|
|
29
|
+
x_mailer?: string;
|
|
30
|
+
}
|
|
@@ -0,0 +1,36 @@
|
|
|
1
|
+
import type { CodeSignature } from './CodeSignature';
|
|
2
|
+
import type { Elf } from './Elf';
|
|
3
|
+
import type { FileHash } from './FileHash';
|
|
4
|
+
import type { Pe } from './Pe';
|
|
5
|
+
|
|
6
|
+
/**
|
|
7
|
+
* NOTE: This is an auto-generated file. Don't edit this manually.
|
|
8
|
+
*/
|
|
9
|
+
export interface ObservableFile {
|
|
10
|
+
accessed?: string;
|
|
11
|
+
attributes?: string[];
|
|
12
|
+
code_signature?: CodeSignature;
|
|
13
|
+
created?: string;
|
|
14
|
+
ctime?: string;
|
|
15
|
+
device?: string;
|
|
16
|
+
directory?: string;
|
|
17
|
+
drive_letter?: string;
|
|
18
|
+
elf?: Elf;
|
|
19
|
+
extension?: string;
|
|
20
|
+
fork_name?: string;
|
|
21
|
+
gid?: string;
|
|
22
|
+
group?: string;
|
|
23
|
+
hash?: FileHash;
|
|
24
|
+
inode?: string;
|
|
25
|
+
mime_type?: string;
|
|
26
|
+
mode?: string;
|
|
27
|
+
mtime?: string;
|
|
28
|
+
name?: string;
|
|
29
|
+
owner?: string;
|
|
30
|
+
path?: string;
|
|
31
|
+
pe?: Pe;
|
|
32
|
+
size?: number;
|
|
33
|
+
target_path?: string;
|
|
34
|
+
type?: string;
|
|
35
|
+
uid?: string;
|
|
36
|
+
}
|
|
@@ -0,0 +1,44 @@
|
|
|
1
|
+
import type { HowlerComment } from './HowlerComment';
|
|
2
|
+
import type { HowlerDossier } from './HowlerDossier';
|
|
3
|
+
import type { Incident } from './Incident';
|
|
4
|
+
import type { Labels } from './Labels';
|
|
5
|
+
import type { Link } from './Link';
|
|
6
|
+
import type { Log } from './Log';
|
|
7
|
+
import type { Outline } from './Outline';
|
|
8
|
+
import type { Votes } from './Votes';
|
|
9
|
+
|
|
10
|
+
/**
|
|
11
|
+
* NOTE: This is an auto-generated file. Don't edit this manually.
|
|
12
|
+
*/
|
|
13
|
+
export interface ObservableHowler {
|
|
14
|
+
analytic: string;
|
|
15
|
+
assessment?: string;
|
|
16
|
+
assignment: string;
|
|
17
|
+
comment?: HowlerComment[];
|
|
18
|
+
confidence?: number;
|
|
19
|
+
data?: string;
|
|
20
|
+
detection?: string;
|
|
21
|
+
dossier?: HowlerDossier[];
|
|
22
|
+
escalation?: string;
|
|
23
|
+
expiry?: string;
|
|
24
|
+
hash: string;
|
|
25
|
+
id: string;
|
|
26
|
+
incidents?: Incident[];
|
|
27
|
+
labels?: Labels;
|
|
28
|
+
links?: Link[];
|
|
29
|
+
log?: Log[];
|
|
30
|
+
mitigated?: string;
|
|
31
|
+
monitored?: string;
|
|
32
|
+
outline?: Outline;
|
|
33
|
+
rationale?: string;
|
|
34
|
+
related?: string[];
|
|
35
|
+
reliability?: number;
|
|
36
|
+
reported?: string;
|
|
37
|
+
score?: number;
|
|
38
|
+
scrutiny?: string;
|
|
39
|
+
severity?: number;
|
|
40
|
+
status?: string;
|
|
41
|
+
viewers?: string[];
|
|
42
|
+
volume?: number;
|
|
43
|
+
votes?: Votes;
|
|
44
|
+
}
|
|
@@ -0,0 +1,11 @@
|
|
|
1
|
+
import type { HttpResponse } from './HttpResponse';
|
|
2
|
+
import type { Request } from './Request';
|
|
3
|
+
|
|
4
|
+
/**
|
|
5
|
+
* NOTE: This is an auto-generated file. Don't edit this manually.
|
|
6
|
+
*/
|
|
7
|
+
export interface ObservableHttp {
|
|
8
|
+
request?: Request;
|
|
9
|
+
response?: HttpResponse;
|
|
10
|
+
version?: string;
|
|
11
|
+
}
|
|
@@ -0,0 +1,21 @@
|
|
|
1
|
+
import type { Egress } from './Egress';
|
|
2
|
+
import type { Interface } from './Interface';
|
|
3
|
+
import type { ObserverIngress } from './ObserverIngress';
|
|
4
|
+
|
|
5
|
+
/**
|
|
6
|
+
* NOTE: This is an auto-generated file. Don't edit this manually.
|
|
7
|
+
*/
|
|
8
|
+
export interface ObservableObserver {
|
|
9
|
+
egress?: Egress;
|
|
10
|
+
hostname?: string;
|
|
11
|
+
ingress?: ObserverIngress;
|
|
12
|
+
interface?: Interface;
|
|
13
|
+
ip?: string[];
|
|
14
|
+
mac?: string[];
|
|
15
|
+
name?: string;
|
|
16
|
+
product?: string;
|
|
17
|
+
serial_number?: string;
|
|
18
|
+
type?: string;
|
|
19
|
+
vendor?: string;
|
|
20
|
+
version?: string;
|
|
21
|
+
}
|
|
@@ -0,0 +1,34 @@
|
|
|
1
|
+
import type { CodeSignature } from './CodeSignature';
|
|
2
|
+
import type { EntryMeta } from './EntryMeta';
|
|
3
|
+
import type { Pe } from './Pe';
|
|
4
|
+
import type { ProcessHash } from './ProcessHash';
|
|
5
|
+
import type { ProcessParent } from './ProcessParent';
|
|
6
|
+
import type { ProcessUser } from './ProcessUser';
|
|
7
|
+
|
|
8
|
+
/**
|
|
9
|
+
* NOTE: This is an auto-generated file. Don't edit this manually.
|
|
10
|
+
*/
|
|
11
|
+
export interface ObservableProcess {
|
|
12
|
+
args?: string[];
|
|
13
|
+
args_count?: number;
|
|
14
|
+
code_signature?: CodeSignature;
|
|
15
|
+
command_line?: string;
|
|
16
|
+
end?: string;
|
|
17
|
+
entity_id?: string;
|
|
18
|
+
entry_meta?: EntryMeta;
|
|
19
|
+
env_vars?: { [index: string]: string };
|
|
20
|
+
executable?: string;
|
|
21
|
+
exit_code?: number;
|
|
22
|
+
hash?: ProcessHash;
|
|
23
|
+
interactive?: boolean;
|
|
24
|
+
name?: string;
|
|
25
|
+
parent?: ProcessParent;
|
|
26
|
+
pe?: Pe;
|
|
27
|
+
pid?: number;
|
|
28
|
+
same_as_process?: boolean;
|
|
29
|
+
start?: string;
|
|
30
|
+
title?: string;
|
|
31
|
+
uptime?: number;
|
|
32
|
+
user?: ProcessUser;
|
|
33
|
+
working_directory?: string;
|
|
34
|
+
}
|
|
@@ -0,0 +1,23 @@
|
|
|
1
|
+
import type { AutonomousSystems } from './AutonomousSystems';
|
|
2
|
+
import type { Geo } from './Geo';
|
|
3
|
+
import type { Nat } from './Nat';
|
|
4
|
+
import type { SourceOriginal } from './SourceOriginal';
|
|
5
|
+
import type { User } from './User';
|
|
6
|
+
|
|
7
|
+
/**
|
|
8
|
+
* NOTE: This is an auto-generated file. Don't edit this manually.
|
|
9
|
+
*/
|
|
10
|
+
export interface ObservableSource {
|
|
11
|
+
address?: string;
|
|
12
|
+
autonomous_systems?: AutonomousSystems;
|
|
13
|
+
bytes?: number;
|
|
14
|
+
domain?: string;
|
|
15
|
+
geo?: Geo;
|
|
16
|
+
ip?: string;
|
|
17
|
+
mac?: string;
|
|
18
|
+
nat?: Nat;
|
|
19
|
+
original?: SourceOriginal;
|
|
20
|
+
packets?: number;
|
|
21
|
+
port?: number;
|
|
22
|
+
user?: User;
|
|
23
|
+
}
|
|
@@ -0,0 +1,21 @@
|
|
|
1
|
+
import type { Feed } from './Feed';
|
|
2
|
+
import type { Software } from './Software';
|
|
3
|
+
import type { ThreatEnrichment } from './ThreatEnrichment';
|
|
4
|
+
import type { ThreatGroup } from './ThreatGroup';
|
|
5
|
+
import type { ThreatIndicator } from './ThreatIndicator';
|
|
6
|
+
import type { ThreatTactic } from './ThreatTactic';
|
|
7
|
+
import type { ThreatTechnique } from './ThreatTechnique';
|
|
8
|
+
|
|
9
|
+
/**
|
|
10
|
+
* NOTE: This is an auto-generated file. Don't edit this manually.
|
|
11
|
+
*/
|
|
12
|
+
export interface ObservableThreat {
|
|
13
|
+
enrichments?: ThreatEnrichment[];
|
|
14
|
+
feed?: Feed;
|
|
15
|
+
framework?: string;
|
|
16
|
+
group?: ThreatGroup;
|
|
17
|
+
indicator?: ThreatIndicator;
|
|
18
|
+
software?: Software;
|
|
19
|
+
tactic?: ThreatTactic;
|
|
20
|
+
technique?: ThreatTechnique;
|
|
21
|
+
}
|
|
@@ -0,0 +1,12 @@
|
|
|
1
|
+
import type { Client } from './Client';
|
|
2
|
+
import type { TlsServer } from './TlsServer';
|
|
3
|
+
|
|
4
|
+
/**
|
|
5
|
+
* NOTE: This is an auto-generated file. Don't edit this manually.
|
|
6
|
+
*/
|
|
7
|
+
export interface ObservableTls {
|
|
8
|
+
client?: Client;
|
|
9
|
+
server?: TlsServer;
|
|
10
|
+
version?: string;
|
|
11
|
+
version_protocol?: string;
|
|
12
|
+
}
|
|
@@ -2,14 +2,6 @@
|
|
|
2
2
|
* NOTE: This is an auto-generated file. Don't edit this manually.
|
|
3
3
|
*/
|
|
4
4
|
export interface Rule {
|
|
5
|
-
|
|
6
|
-
|
|
7
|
-
description?: string;
|
|
8
|
-
id?: string;
|
|
9
|
-
license?: string;
|
|
10
|
-
name?: string;
|
|
11
|
-
reference?: string;
|
|
12
|
-
ruleset?: string;
|
|
13
|
-
uuid?: string;
|
|
14
|
-
version?: string;
|
|
5
|
+
destination?: string;
|
|
6
|
+
query?: string;
|
|
15
7
|
}
|
|
@@ -1,6 +1,6 @@
|
|
|
1
|
-
import type { Enrichment } from './Enrichment';
|
|
2
1
|
import type { Feed } from './Feed';
|
|
3
2
|
import type { Software } from './Software';
|
|
3
|
+
import type { ThreatEnrichment } from './ThreatEnrichment';
|
|
4
4
|
import type { ThreatGroup } from './ThreatGroup';
|
|
5
5
|
import type { ThreatIndicator } from './ThreatIndicator';
|
|
6
6
|
import type { ThreatTactic } from './ThreatTactic';
|
|
@@ -10,7 +10,7 @@ import type { ThreatTechnique } from './ThreatTechnique';
|
|
|
10
10
|
* NOTE: This is an auto-generated file. Don't edit this manually.
|
|
11
11
|
*/
|
|
12
12
|
export interface Threat {
|
|
13
|
-
enrichments?:
|
|
13
|
+
enrichments?: ThreatEnrichment[];
|
|
14
14
|
feed?: Feed;
|
|
15
15
|
framework?: string;
|
|
16
16
|
group?: ThreatGroup;
|