@cccsaurora/howler-ui 2.17.0-dev.564 → 2.17.0-dev.600

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (168) hide show
  1. package/api/index.d.ts +2 -0
  2. package/api/index.js +4 -2
  3. package/api/search/case.d.ts +4 -0
  4. package/api/search/case.js +8 -0
  5. package/api/search/index.d.ts +2 -1
  6. package/api/search/index.js +2 -1
  7. package/api/v2/case/index.d.ts +6 -0
  8. package/api/v2/case/index.js +18 -0
  9. package/api/v2/index.d.ts +4 -0
  10. package/api/v2/index.js +6 -0
  11. package/api/v2/search/facet.d.ts +3 -0
  12. package/api/v2/search/facet.js +12 -0
  13. package/api/v2/search/index.d.ts +5 -0
  14. package/api/v2/search/index.js +24 -0
  15. package/commons/components/leftnav/LeftNavDrawer.js +1 -1
  16. package/components/app/App.js +14 -0
  17. package/components/app/providers/FavouritesProvider.js +2 -2
  18. package/components/app/providers/HitSearchProvider.d.ts +0 -1
  19. package/components/app/providers/HitSearchProvider.js +6 -11
  20. package/components/app/providers/HitSearchProvider.test.js +11 -32
  21. package/components/app/providers/ParameterProvider.d.ts +9 -2
  22. package/components/app/providers/ParameterProvider.js +165 -240
  23. package/components/app/providers/ParameterProvider.test.js +307 -14
  24. package/components/{routes/overviews/OverviewEditor.js → elements/MarkdownEditor.js} +3 -3
  25. package/components/elements/ObjectDetails.d.ts +6 -0
  26. package/components/elements/{hit/HitDetails.js → ObjectDetails.js} +17 -17
  27. package/components/elements/PluginTypography.d.ts +2 -1
  28. package/components/elements/PluginTypography.js +3 -2
  29. package/components/elements/UserList.d.ts +5 -2
  30. package/components/elements/UserList.js +14 -5
  31. package/components/elements/addons/search/phrase/Phrase.js +1 -1
  32. package/components/elements/case/CaseCard.d.ts +8 -0
  33. package/components/elements/case/CaseCard.js +39 -0
  34. package/components/elements/case/CasePreview.d.ts +6 -0
  35. package/components/elements/case/CasePreview.js +17 -0
  36. package/components/elements/case/StatusIcon.d.ts +5 -0
  37. package/components/elements/case/StatusIcon.js +13 -0
  38. package/components/elements/display/ChipPopper.d.ts +1 -0
  39. package/components/elements/display/ChipPopper.js +2 -2
  40. package/components/elements/display/HowlerCard.js +1 -1
  41. package/components/elements/display/Modal.js +1 -0
  42. package/components/elements/hit/HitBanner.js +28 -48
  43. package/components/elements/hit/HitCard.js +1 -1
  44. package/components/elements/hit/{HitQuickSearch.d.ts → HitPreview.d.ts} +3 -3
  45. package/components/elements/hit/{HitQuickSearch.js → HitPreview.js} +10 -4
  46. package/components/elements/hit/HitRelated.d.ts +1 -1
  47. package/components/elements/hit/HitRelated.js +30 -3
  48. package/components/elements/hit/elements/AnalyticLink.d.ts +8 -0
  49. package/components/elements/hit/elements/AnalyticLink.js +22 -0
  50. package/components/elements/hit/outlines/DefaultOutline.js +1 -1
  51. package/components/elements/hit/related/RelatedRecords.js +63 -0
  52. package/components/elements/observable/ObservableCard.d.ts +5 -0
  53. package/components/elements/observable/ObservableCard.js +7 -0
  54. package/components/elements/observable/ObservablePreview.d.ts +6 -0
  55. package/components/elements/observable/ObservablePreview.js +12 -0
  56. package/components/elements/view/ViewTitle.js +1 -1
  57. package/components/hooks/useHitActions.d.ts +1 -1
  58. package/components/hooks/useHitActions.js +2 -2
  59. package/components/hooks/useHitSelection.js +3 -24
  60. package/components/hooks/useMyPreferences.js +10 -1
  61. package/components/hooks/useMySearch.js +2 -2
  62. package/components/hooks/useMySitemap.js +4 -1
  63. package/components/hooks/useMyTheme.js +9 -2
  64. package/components/hooks/useRelatedRecords.d.ts +13 -0
  65. package/components/hooks/useRelatedRecords.js +32 -0
  66. package/components/routes/action/view/ActionSearch.js +1 -1
  67. package/components/routes/advanced/QueryBuilder.js +1 -1
  68. package/components/routes/analytics/AnalyticDetails.js +2 -2
  69. package/components/routes/analytics/AnalyticSearch.js +1 -1
  70. package/components/routes/cases/CaseViewer.d.ts +2 -0
  71. package/components/routes/cases/CaseViewer.js +24 -0
  72. package/components/routes/cases/Cases.d.ts +2 -0
  73. package/components/routes/cases/Cases.js +101 -0
  74. package/components/routes/cases/constants.d.ts +5 -0
  75. package/components/routes/cases/constants.js +5 -0
  76. package/components/routes/cases/detail/AlertPanel.d.ts +6 -0
  77. package/components/routes/cases/detail/AlertPanel.js +32 -0
  78. package/components/routes/cases/detail/CaseDashboard.d.ts +7 -0
  79. package/components/routes/cases/detail/CaseDashboard.js +49 -0
  80. package/components/routes/cases/detail/CaseDetails.d.ts +6 -0
  81. package/components/routes/cases/detail/CaseDetails.js +61 -0
  82. package/components/routes/cases/detail/CaseOverview.d.ts +7 -0
  83. package/components/routes/cases/detail/CaseOverview.js +43 -0
  84. package/components/routes/cases/detail/CaseSidebar.d.ts +6 -0
  85. package/components/routes/cases/detail/CaseSidebar.js +36 -0
  86. package/components/routes/cases/detail/CaseTask.d.ts +11 -0
  87. package/components/routes/cases/detail/CaseTask.js +57 -0
  88. package/components/routes/cases/detail/ItemPage.d.ts +6 -0
  89. package/components/routes/cases/detail/ItemPage.js +93 -0
  90. package/components/routes/cases/detail/RelatedCasePanel.d.ts +6 -0
  91. package/components/routes/cases/detail/RelatedCasePanel.js +31 -0
  92. package/components/routes/cases/detail/TaskPanel.d.ts +7 -0
  93. package/components/routes/cases/detail/TaskPanel.js +52 -0
  94. package/components/routes/cases/detail/aggregates/CaseAggregate.d.ts +12 -0
  95. package/components/routes/cases/detail/aggregates/CaseAggregate.js +19 -0
  96. package/components/routes/cases/detail/aggregates/SourceAggregate.d.ts +6 -0
  97. package/components/routes/cases/detail/aggregates/SourceAggregate.js +27 -0
  98. package/components/routes/cases/detail/sidebar/CaseFolder.d.ts +12 -0
  99. package/components/routes/cases/detail/sidebar/CaseFolder.js +179 -0
  100. package/components/routes/cases/detail/sidebar/types.d.ts +3 -0
  101. package/components/routes/cases/hooks/useCase.d.ts +13 -0
  102. package/components/routes/cases/hooks/useCase.js +38 -0
  103. package/components/routes/cases/modals/ResolveModal.d.ts +7 -0
  104. package/components/routes/cases/modals/ResolveModal.js +59 -0
  105. package/components/routes/help/ApiDocumentation.js +1 -1
  106. package/components/routes/help/HitDocumentation.js +1 -3
  107. package/components/routes/hits/search/HitContextMenu.js +3 -2
  108. package/components/routes/hits/search/InformationPane.d.ts +1 -0
  109. package/components/routes/hits/search/InformationPane.js +6 -28
  110. package/components/routes/hits/search/QuerySettings.js +2 -1
  111. package/components/routes/hits/search/QuerySettings.test.js +14 -9
  112. package/components/routes/hits/search/SearchPane.js +7 -32
  113. package/components/routes/hits/search/ViewLink.js +1 -1
  114. package/components/routes/hits/search/grid/EnhancedCell.js +1 -1
  115. package/components/routes/hits/search/shared/IndexPicker.d.ts +2 -0
  116. package/components/routes/hits/search/shared/IndexPicker.js +20 -0
  117. package/components/routes/hits/view/HitViewer.js +3 -4
  118. package/components/routes/home/ViewCard.js +1 -1
  119. package/components/routes/observables/ObservableViewer.d.ts +7 -0
  120. package/components/routes/observables/ObservableViewer.js +27 -0
  121. package/components/routes/overviews/OverviewViewer.js +2 -2
  122. package/locales/en/translation.json +437 -398
  123. package/locales/fr/translation.json +442 -408
  124. package/models/WithMetadata.d.ts +2 -1
  125. package/models/entities/generated/AttachmentsFile.d.ts +12 -0
  126. package/models/entities/generated/Case.d.ts +28 -0
  127. package/models/entities/generated/DestinationOriginal.d.ts +19 -0
  128. package/models/entities/generated/EmailAttachment.d.ts +8 -0
  129. package/models/entities/generated/EmailParent.d.ts +19 -0
  130. package/models/entities/generated/Enrichments.d.ts +7 -0
  131. package/models/entities/generated/EnrichmentsIndicator.d.ts +21 -0
  132. package/models/entities/generated/Howler.d.ts +0 -4
  133. package/models/entities/generated/HttpResponse.d.ts +11 -0
  134. package/models/entities/generated/Item.d.ts +9 -0
  135. package/models/entities/generated/Observable.d.ts +84 -0
  136. package/models/entities/generated/ObservableCloud.d.ts +20 -0
  137. package/models/entities/generated/ObservableDestination.d.ts +23 -0
  138. package/models/entities/generated/ObservableEmail.d.ts +30 -0
  139. package/models/entities/generated/ObservableFile.d.ts +36 -0
  140. package/models/entities/generated/ObservableHowler.d.ts +44 -0
  141. package/models/entities/generated/ObservableHttp.d.ts +11 -0
  142. package/models/entities/generated/ObservableObserver.d.ts +21 -0
  143. package/models/entities/generated/ObservableOrganization.d.ts +7 -0
  144. package/models/entities/generated/ObservableProcess.d.ts +34 -0
  145. package/models/entities/generated/ObservableSource.d.ts +23 -0
  146. package/models/entities/generated/ObservableThreat.d.ts +21 -0
  147. package/models/entities/generated/ObservableTls.d.ts +12 -0
  148. package/models/entities/generated/ObserverIngress.d.ts +9 -0
  149. package/models/entities/generated/Rule.d.ts +2 -10
  150. package/models/entities/generated/Task.d.ts +10 -0
  151. package/models/entities/generated/Threat.d.ts +2 -2
  152. package/models/entities/generated/{Enrichment.d.ts → ThreatEnrichment.d.ts} +1 -1
  153. package/package.json +16 -1
  154. package/plugins/clue/components/ClueTypography.js +2 -2
  155. package/plugins/clue/utils.d.ts +2 -1
  156. package/utils/constants.d.ts +3 -3
  157. package/utils/typeUtils.d.ts +7 -0
  158. package/utils/typeUtils.js +18 -0
  159. package/components/elements/display/icons/BundleButton.d.ts +0 -6
  160. package/components/elements/display/icons/BundleButton.js +0 -32
  161. package/components/routes/help/BundleDocumentation.d.ts +0 -3
  162. package/components/routes/help/BundleDocumentation.js +0 -12
  163. package/components/routes/help/markdown/en/bundles.md.js +0 -1
  164. package/components/routes/help/markdown/fr/bundles.md.js +0 -1
  165. package/components/routes/hits/search/BundleParentMenu.d.ts +0 -6
  166. package/components/routes/hits/search/BundleParentMenu.js +0 -32
  167. /package/components/{routes/overviews/OverviewEditor.d.ts → elements/MarkdownEditor.d.ts} +0 -0
  168. /package/components/elements/hit/{HitDetails.d.ts → related/RelatedRecords.d.ts} +0 -0
@@ -4,9 +4,10 @@ import type { Overview } from './entities/generated/Overview';
4
4
  import type { Template } from './entities/generated/Template';
5
5
 
6
6
  export type WithMetadata<T> = T & {
7
+ __index?: string;
8
+
7
9
  __analytic?: Analytic;
8
10
  __overview?: Overview;
9
11
  __template?: Template;
10
-
11
12
  __dossiers?: Dossier[];
12
13
  };
@@ -0,0 +1,12 @@
1
+ import type { FileHash } from './FileHash';
2
+
3
+ /**
4
+ * NOTE: This is an auto-generated file. Don't edit this manually.
5
+ */
6
+ export interface AttachmentsFile {
7
+ extension?: string;
8
+ hash?: FileHash;
9
+ mime_type?: string;
10
+ name?: string;
11
+ size?: number;
12
+ }
@@ -0,0 +1,28 @@
1
+ import type { Enrichments } from './Enrichments';
2
+ import type { Item } from './Item';
3
+ import type { Rule } from './Rule';
4
+ import type { Task } from './Task';
5
+
6
+ /**
7
+ * NOTE: This is an auto-generated file. Don't edit this manually.
8
+ */
9
+ export interface Case {
10
+ case_id?: string;
11
+ created?: string;
12
+ end?: string;
13
+ enrichments?: Enrichments;
14
+ escalation?: string;
15
+ indicators?: string[];
16
+ items?: Item[];
17
+ overview?: string;
18
+ participants?: string[];
19
+ rules?: Rule[];
20
+ status?: string;
21
+ start?: string;
22
+ summary?: string;
23
+ targets?: string[];
24
+ tasks?: Task[];
25
+ threats?: string[];
26
+ title?: string;
27
+ updated?: string;
28
+ }
@@ -0,0 +1,19 @@
1
+ import type { AutonomousSystems } from './AutonomousSystems';
2
+ import type { Geo } from './Geo';
3
+ import type { Nat } from './Nat';
4
+
5
+ /**
6
+ * NOTE: This is an auto-generated file. Don't edit this manually.
7
+ */
8
+ export interface DestinationOriginal {
9
+ address?: string;
10
+ autonomous_systems?: AutonomousSystems;
11
+ bytes?: number;
12
+ domain?: string;
13
+ geo?: Geo;
14
+ ip?: string;
15
+ mac?: string;
16
+ nat?: Nat;
17
+ packets?: number;
18
+ port?: number;
19
+ }
@@ -0,0 +1,8 @@
1
+ import type { AttachmentsFile } from './AttachmentsFile';
2
+
3
+ /**
4
+ * NOTE: This is an auto-generated file. Don't edit this manually.
5
+ */
6
+ export interface EmailAttachment {
7
+ file?: AttachmentsFile;
8
+ }
@@ -0,0 +1,19 @@
1
+ import type { Bcc } from './Bcc';
2
+ import type { Cc } from './Cc';
3
+ import type { From } from './From';
4
+ import type { To } from './To';
5
+
6
+ /**
7
+ * NOTE: This is an auto-generated file. Don't edit this manually.
8
+ */
9
+ export interface EmailParent {
10
+ bcc?: Bcc;
11
+ cc?: Cc;
12
+ destination?: string;
13
+ from?: From;
14
+ message_id?: string;
15
+ origination_timestamp?: string;
16
+ source?: string;
17
+ subject?: string;
18
+ to?: To;
19
+ }
@@ -0,0 +1,7 @@
1
+ /**
2
+ * NOTE: This is an auto-generated file. Don't edit this manually.
3
+ */
4
+ export interface Enrichments {
5
+ annotations?: string;
6
+ path?: string;
7
+ }
@@ -0,0 +1,21 @@
1
+ import type { IndicatorEmail } from './IndicatorEmail';
2
+ import type { IndicatorFile } from './IndicatorFile';
3
+
4
+ /**
5
+ * NOTE: This is an auto-generated file. Don't edit this manually.
6
+ */
7
+ export interface EnrichmentsIndicator {
8
+ confidence?: string;
9
+ description?: string;
10
+ email?: IndicatorEmail;
11
+ file?: IndicatorFile;
12
+ first_seen?: string;
13
+ ip?: string;
14
+ last_seen?: string;
15
+ port?: number;
16
+ provider?: string;
17
+ reference?: string;
18
+ scanner_stats?: number;
19
+ sightings?: number;
20
+ type?: string;
21
+ }
@@ -14,8 +14,6 @@ export interface Howler {
14
14
  analytic: string;
15
15
  assessment?: string;
16
16
  assignment: string;
17
- bundle_size?: number;
18
- bundles?: string[];
19
17
  comment?: HowlerComment[];
20
18
  confidence?: number;
21
19
  data?: string[];
@@ -24,10 +22,8 @@ export interface Howler {
24
22
  escalation?: string;
25
23
  expiry?: string;
26
24
  hash: string;
27
- hits?: string[];
28
25
  id: string;
29
26
  incidents?: Incident[];
30
- is_bundle?: boolean;
31
27
  labels?: Labels;
32
28
  links?: Link[];
33
29
  log?: Log[];
@@ -0,0 +1,11 @@
1
+ import type { Body } from './Body';
2
+
3
+ /**
4
+ * NOTE: This is an auto-generated file. Don't edit this manually.
5
+ */
6
+ export interface HttpResponse {
7
+ body?: Body;
8
+ bytes?: number;
9
+ mime_type?: string;
10
+ status_code?: number;
11
+ }
@@ -0,0 +1,9 @@
1
+ /**
2
+ * NOTE: This is an auto-generated file. Don't edit this manually.
3
+ */
4
+ export interface Item {
5
+ id?: string;
6
+ path?: string;
7
+ type?: string;
8
+ value?: string;
9
+ }
@@ -0,0 +1,84 @@
1
+ import type { Agent } from './Agent';
2
+ import type { Assemblyline } from './Assemblyline';
3
+ import type { Aws } from './Aws';
4
+ import type { Azure } from './Azure';
5
+ import type { Cbs } from './Cbs';
6
+ import type { Clue } from './Clue';
7
+ import type { Container } from './Container';
8
+ import type { Dns } from './Dns';
9
+ import type { Ecs } from './Ecs';
10
+ import type { Error } from './Error';
11
+ import type { Event } from './Event';
12
+ import type { Faas } from './Faas';
13
+ import type { Gcp } from './Gcp';
14
+ import type { Group } from './Group';
15
+ import type { Host } from './Host';
16
+ import type { Interface } from './Interface';
17
+ import type { Network } from './Network';
18
+ import type { ObservableCloud } from './ObservableCloud';
19
+ import type { ObservableDestination } from './ObservableDestination';
20
+ import type { ObservableEmail } from './ObservableEmail';
21
+ import type { ObservableFile } from './ObservableFile';
22
+ import type { ObservableHowler } from './ObservableHowler';
23
+ import type { ObservableHttp } from './ObservableHttp';
24
+ import type { ObservableObserver } from './ObservableObserver';
25
+ import type { ObservableOrganization } from './ObservableOrganization';
26
+ import type { ObservableProcess } from './ObservableProcess';
27
+ import type { ObservableSource } from './ObservableSource';
28
+ import type { ObservableThreat } from './ObservableThreat';
29
+ import type { ObservableTls } from './ObservableTls';
30
+ import type { Registry } from './Registry';
31
+ import type { Related } from './Related';
32
+ import type { Rule } from './Rule';
33
+ import type { Server } from './Server';
34
+ import type { Url } from './Url';
35
+ import type { User } from './User';
36
+ import type { UserAgent } from './UserAgent';
37
+ import type { Vulnerability } from './Vulnerability';
38
+
39
+ /**
40
+ * NOTE: This is an auto-generated file. Don't edit this manually.
41
+ */
42
+ export interface Observable {
43
+ agent?: Agent;
44
+ assemblyline?: Assemblyline;
45
+ aws?: Aws;
46
+ azure?: Azure;
47
+ cbs?: Cbs;
48
+ cloud?: ObservableCloud;
49
+ clue?: Clue;
50
+ container?: Container;
51
+ destination?: ObservableDestination;
52
+ dns?: Dns;
53
+ ecs?: Ecs;
54
+ email?: ObservableEmail;
55
+ error?: Error;
56
+ event?: Event;
57
+ faas?: Faas;
58
+ file?: ObservableFile;
59
+ gcp?: Gcp;
60
+ group?: Group;
61
+ host?: Host;
62
+ howler: ObservableHowler;
63
+ http?: ObservableHttp;
64
+ interface?: Interface;
65
+ labels?: { [index: string]: string };
66
+ message?: string;
67
+ network?: Network;
68
+ observer?: ObservableObserver;
69
+ organization?: ObservableOrganization;
70
+ process?: ObservableProcess;
71
+ registry?: Registry;
72
+ related?: Related;
73
+ rule?: Rule;
74
+ server?: Server;
75
+ source?: ObservableSource;
76
+ tags?: string[];
77
+ threat?: ObservableThreat;
78
+ timestamp: string;
79
+ tls?: ObservableTls;
80
+ url?: Url;
81
+ user?: User;
82
+ user_agent?: UserAgent;
83
+ vulnerability?: Vulnerability;
84
+ }
@@ -0,0 +1,20 @@
1
+ import type { CloudAccount } from './CloudAccount';
2
+ import type { Instance } from './Instance';
3
+ import type { Machine } from './Machine';
4
+ import type { Project } from './Project';
5
+ import type { Service } from './Service';
6
+
7
+ /**
8
+ * NOTE: This is an auto-generated file. Don't edit this manually.
9
+ */
10
+ export interface ObservableCloud {
11
+ account?: CloudAccount;
12
+ availability_zone?: string;
13
+ instance?: Instance;
14
+ machine?: Machine;
15
+ project?: Project;
16
+ provider?: string;
17
+ region?: string;
18
+ service?: Service;
19
+ tenant_id?: string;
20
+ }
@@ -0,0 +1,23 @@
1
+ import type { AutonomousSystems } from './AutonomousSystems';
2
+ import type { DestinationOriginal } from './DestinationOriginal';
3
+ import type { Geo } from './Geo';
4
+ import type { Nat } from './Nat';
5
+ import type { User } from './User';
6
+
7
+ /**
8
+ * NOTE: This is an auto-generated file. Don't edit this manually.
9
+ */
10
+ export interface ObservableDestination {
11
+ address?: string;
12
+ autonomous_systems?: AutonomousSystems;
13
+ bytes?: number;
14
+ domain?: string;
15
+ geo?: Geo;
16
+ ip?: string;
17
+ mac?: string;
18
+ nat?: Nat;
19
+ original?: DestinationOriginal;
20
+ packets?: number;
21
+ port?: number;
22
+ user?: User;
23
+ }
@@ -0,0 +1,30 @@
1
+ import type { Bcc } from './Bcc';
2
+ import type { Cc } from './Cc';
3
+ import type { EmailAttachment } from './EmailAttachment';
4
+ import type { EmailParent } from './EmailParent';
5
+ import type { From } from './From';
6
+ import type { ReplyTo } from './ReplyTo';
7
+ import type { Sender } from './Sender';
8
+ import type { To } from './To';
9
+
10
+ /**
11
+ * NOTE: This is an auto-generated file. Don't edit this manually.
12
+ */
13
+ export interface ObservableEmail {
14
+ attachments?: EmailAttachment[];
15
+ bcc?: Bcc;
16
+ cc?: Cc;
17
+ content_type?: string;
18
+ delivery_timestamp?: string;
19
+ direction?: string;
20
+ from?: From;
21
+ local_id?: string;
22
+ message_id?: string;
23
+ origination_timestamp?: string;
24
+ parent?: EmailParent;
25
+ reply_to?: ReplyTo;
26
+ sender?: Sender;
27
+ subject?: string;
28
+ to?: To;
29
+ x_mailer?: string;
30
+ }
@@ -0,0 +1,36 @@
1
+ import type { CodeSignature } from './CodeSignature';
2
+ import type { Elf } from './Elf';
3
+ import type { FileHash } from './FileHash';
4
+ import type { Pe } from './Pe';
5
+
6
+ /**
7
+ * NOTE: This is an auto-generated file. Don't edit this manually.
8
+ */
9
+ export interface ObservableFile {
10
+ accessed?: string;
11
+ attributes?: string[];
12
+ code_signature?: CodeSignature;
13
+ created?: string;
14
+ ctime?: string;
15
+ device?: string;
16
+ directory?: string;
17
+ drive_letter?: string;
18
+ elf?: Elf;
19
+ extension?: string;
20
+ fork_name?: string;
21
+ gid?: string;
22
+ group?: string;
23
+ hash?: FileHash;
24
+ inode?: string;
25
+ mime_type?: string;
26
+ mode?: string;
27
+ mtime?: string;
28
+ name?: string;
29
+ owner?: string;
30
+ path?: string;
31
+ pe?: Pe;
32
+ size?: number;
33
+ target_path?: string;
34
+ type?: string;
35
+ uid?: string;
36
+ }
@@ -0,0 +1,44 @@
1
+ import type { HowlerComment } from './HowlerComment';
2
+ import type { HowlerDossier } from './HowlerDossier';
3
+ import type { Incident } from './Incident';
4
+ import type { Labels } from './Labels';
5
+ import type { Link } from './Link';
6
+ import type { Log } from './Log';
7
+ import type { Outline } from './Outline';
8
+ import type { Votes } from './Votes';
9
+
10
+ /**
11
+ * NOTE: This is an auto-generated file. Don't edit this manually.
12
+ */
13
+ export interface ObservableHowler {
14
+ analytic: string;
15
+ assessment?: string;
16
+ assignment: string;
17
+ comment?: HowlerComment[];
18
+ confidence?: number;
19
+ data?: string;
20
+ detection?: string;
21
+ dossier?: HowlerDossier[];
22
+ escalation?: string;
23
+ expiry?: string;
24
+ hash: string;
25
+ id: string;
26
+ incidents?: Incident[];
27
+ labels?: Labels;
28
+ links?: Link[];
29
+ log?: Log[];
30
+ mitigated?: string;
31
+ monitored?: string;
32
+ outline?: Outline;
33
+ rationale?: string;
34
+ related?: string[];
35
+ reliability?: number;
36
+ reported?: string;
37
+ score?: number;
38
+ scrutiny?: string;
39
+ severity?: number;
40
+ status?: string;
41
+ viewers?: string[];
42
+ volume?: number;
43
+ votes?: Votes;
44
+ }
@@ -0,0 +1,11 @@
1
+ import type { HttpResponse } from './HttpResponse';
2
+ import type { Request } from './Request';
3
+
4
+ /**
5
+ * NOTE: This is an auto-generated file. Don't edit this manually.
6
+ */
7
+ export interface ObservableHttp {
8
+ request?: Request;
9
+ response?: HttpResponse;
10
+ version?: string;
11
+ }
@@ -0,0 +1,21 @@
1
+ import type { Egress } from './Egress';
2
+ import type { Interface } from './Interface';
3
+ import type { ObserverIngress } from './ObserverIngress';
4
+
5
+ /**
6
+ * NOTE: This is an auto-generated file. Don't edit this manually.
7
+ */
8
+ export interface ObservableObserver {
9
+ egress?: Egress;
10
+ hostname?: string;
11
+ ingress?: ObserverIngress;
12
+ interface?: Interface;
13
+ ip?: string[];
14
+ mac?: string[];
15
+ name?: string;
16
+ product?: string;
17
+ serial_number?: string;
18
+ type?: string;
19
+ vendor?: string;
20
+ version?: string;
21
+ }
@@ -0,0 +1,7 @@
1
+ /**
2
+ * NOTE: This is an auto-generated file. Don't edit this manually.
3
+ */
4
+ export interface ObservableOrganization {
5
+ id?: string;
6
+ name?: string;
7
+ }
@@ -0,0 +1,34 @@
1
+ import type { CodeSignature } from './CodeSignature';
2
+ import type { EntryMeta } from './EntryMeta';
3
+ import type { Pe } from './Pe';
4
+ import type { ProcessHash } from './ProcessHash';
5
+ import type { ProcessParent } from './ProcessParent';
6
+ import type { ProcessUser } from './ProcessUser';
7
+
8
+ /**
9
+ * NOTE: This is an auto-generated file. Don't edit this manually.
10
+ */
11
+ export interface ObservableProcess {
12
+ args?: string[];
13
+ args_count?: number;
14
+ code_signature?: CodeSignature;
15
+ command_line?: string;
16
+ end?: string;
17
+ entity_id?: string;
18
+ entry_meta?: EntryMeta;
19
+ env_vars?: { [index: string]: string };
20
+ executable?: string;
21
+ exit_code?: number;
22
+ hash?: ProcessHash;
23
+ interactive?: boolean;
24
+ name?: string;
25
+ parent?: ProcessParent;
26
+ pe?: Pe;
27
+ pid?: number;
28
+ same_as_process?: boolean;
29
+ start?: string;
30
+ title?: string;
31
+ uptime?: number;
32
+ user?: ProcessUser;
33
+ working_directory?: string;
34
+ }
@@ -0,0 +1,23 @@
1
+ import type { AutonomousSystems } from './AutonomousSystems';
2
+ import type { Geo } from './Geo';
3
+ import type { Nat } from './Nat';
4
+ import type { SourceOriginal } from './SourceOriginal';
5
+ import type { User } from './User';
6
+
7
+ /**
8
+ * NOTE: This is an auto-generated file. Don't edit this manually.
9
+ */
10
+ export interface ObservableSource {
11
+ address?: string;
12
+ autonomous_systems?: AutonomousSystems;
13
+ bytes?: number;
14
+ domain?: string;
15
+ geo?: Geo;
16
+ ip?: string;
17
+ mac?: string;
18
+ nat?: Nat;
19
+ original?: SourceOriginal;
20
+ packets?: number;
21
+ port?: number;
22
+ user?: User;
23
+ }
@@ -0,0 +1,21 @@
1
+ import type { Feed } from './Feed';
2
+ import type { Software } from './Software';
3
+ import type { ThreatEnrichment } from './ThreatEnrichment';
4
+ import type { ThreatGroup } from './ThreatGroup';
5
+ import type { ThreatIndicator } from './ThreatIndicator';
6
+ import type { ThreatTactic } from './ThreatTactic';
7
+ import type { ThreatTechnique } from './ThreatTechnique';
8
+
9
+ /**
10
+ * NOTE: This is an auto-generated file. Don't edit this manually.
11
+ */
12
+ export interface ObservableThreat {
13
+ enrichments?: ThreatEnrichment[];
14
+ feed?: Feed;
15
+ framework?: string;
16
+ group?: ThreatGroup;
17
+ indicator?: ThreatIndicator;
18
+ software?: Software;
19
+ tactic?: ThreatTactic;
20
+ technique?: ThreatTechnique;
21
+ }
@@ -0,0 +1,12 @@
1
+ import type { Client } from './Client';
2
+ import type { TlsServer } from './TlsServer';
3
+
4
+ /**
5
+ * NOTE: This is an auto-generated file. Don't edit this manually.
6
+ */
7
+ export interface ObservableTls {
8
+ client?: Client;
9
+ server?: TlsServer;
10
+ version?: string;
11
+ version_protocol?: string;
12
+ }
@@ -0,0 +1,9 @@
1
+ import type { Interface } from './Interface';
2
+
3
+ /**
4
+ * NOTE: This is an auto-generated file. Don't edit this manually.
5
+ */
6
+ export interface ObserverIngress {
7
+ interface?: Interface;
8
+ zone?: string;
9
+ }
@@ -2,14 +2,6 @@
2
2
  * NOTE: This is an auto-generated file. Don't edit this manually.
3
3
  */
4
4
  export interface Rule {
5
- author?: string;
6
- category?: string;
7
- description?: string;
8
- id?: string;
9
- license?: string;
10
- name?: string;
11
- reference?: string;
12
- ruleset?: string;
13
- uuid?: string;
14
- version?: string;
5
+ destination?: string;
6
+ query?: string;
15
7
  }
@@ -0,0 +1,10 @@
1
+ /**
2
+ * NOTE: This is an auto-generated file. Don't edit this manually.
3
+ */
4
+ export interface Task {
5
+ assignment?: string;
6
+ complete?: boolean;
7
+ id?: string;
8
+ path?: string;
9
+ summary?: string;
10
+ }
@@ -1,6 +1,6 @@
1
- import type { Enrichment } from './Enrichment';
2
1
  import type { Feed } from './Feed';
3
2
  import type { Software } from './Software';
3
+ import type { ThreatEnrichment } from './ThreatEnrichment';
4
4
  import type { ThreatGroup } from './ThreatGroup';
5
5
  import type { ThreatIndicator } from './ThreatIndicator';
6
6
  import type { ThreatTactic } from './ThreatTactic';
@@ -10,7 +10,7 @@ import type { ThreatTechnique } from './ThreatTechnique';
10
10
  * NOTE: This is an auto-generated file. Don't edit this manually.
11
11
  */
12
12
  export interface Threat {
13
- enrichments?: Enrichment[];
13
+ enrichments?: ThreatEnrichment[];
14
14
  feed?: Feed;
15
15
  framework?: string;
16
16
  group?: ThreatGroup;
@@ -4,7 +4,7 @@ import type { Matched } from './Matched';
4
4
  /**
5
5
  * NOTE: This is an auto-generated file. Don't edit this manually.
6
6
  */
7
- export interface Enrichment {
7
+ export interface ThreatEnrichment {
8
8
  indicator?: Indicator;
9
9
  matched?: Matched;
10
10
  }