@cccsaurora/howler-ui 2.19.0-dev.989 → 2.19.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/api/action/index.d.ts +5 -4
- package/api/action/index.js +8 -8
- package/api/analytic/index.d.ts +5 -5
- package/api/analytic/index.js +5 -6
- package/api/analytic/owner.d.ts +2 -1
- package/api/analytic/owner.js +2 -2
- package/api/dossier/index.d.ts +4 -3
- package/api/dossier/index.js +6 -6
- package/api/hit/index.d.ts +3 -2
- package/api/hit/index.js +4 -4
- package/api/hit/labels.d.ts +3 -2
- package/api/hit/labels.js +4 -4
- package/api/hit/overwrite.d.ts +2 -1
- package/api/hit/overwrite.js +2 -2
- package/api/hit/transition.d.ts +2 -1
- package/api/hit/transition.js +2 -2
- package/api/index.d.ts +10 -5
- package/api/index.js +18 -10
- package/api/overview/index.d.ts +4 -3
- package/api/overview/index.js +6 -6
- package/api/search/action.js +1 -1
- package/api/search/analytic.js +1 -1
- package/api/search/case.d.ts +4 -0
- package/api/search/case.js +8 -0
- package/api/search/count/hit.js +1 -1
- package/api/search/dossier.js +1 -1
- package/api/search/eql/hit.js +1 -1
- package/api/search/explain/hit.js +1 -1
- package/api/search/facet/hit.d.ts +1 -3
- package/api/search/facet/hit.js +1 -1
- package/api/search/facet/index.d.ts +3 -1
- package/api/search/grouped/hit.js +1 -1
- package/api/search/grouped/user.js +1 -1
- package/api/search/histogram/hit.js +1 -1
- package/api/search/hit.js +1 -1
- package/api/search/index.d.ts +3 -1
- package/api/search/index.js +2 -1
- package/api/search/overview.d.ts +2 -2
- package/api/search/overview.js +1 -1
- package/api/search/sigma/hit.js +1 -1
- package/api/search/template.js +1 -1
- package/api/search/user.js +1 -1
- package/api/search/view.js +1 -1
- package/api/socket/index.d.ts +3 -0
- package/api/socket/index.js +6 -0
- package/api/socket/viewers.d.ts +2 -0
- package/api/socket/viewers.js +8 -0
- package/api/socket/viewers.test.js +44 -0
- package/api/template/index.d.ts +4 -3
- package/api/template/index.js +6 -6
- package/api/user/index.d.ts +2 -1
- package/api/user/index.js +2 -2
- package/api/v2/case/index.d.ts +9 -0
- package/api/v2/case/index.js +21 -0
- package/api/v2/case/items.d.ts +9 -0
- package/api/v2/case/items.js +19 -0
- package/api/v2/case/rules.d.ts +6 -0
- package/api/v2/case/rules.js +18 -0
- package/api/v2/fuzzy.d.ts +17 -0
- package/api/v2/fuzzy.js +11 -0
- package/api/v2/index.d.ts +5 -0
- package/api/v2/index.js +7 -0
- package/api/v2/search/facet.d.ts +3 -0
- package/api/v2/search/facet.js +12 -0
- package/api/v2/search/index.d.ts +6 -0
- package/api/v2/search/index.js +24 -0
- package/api/view/index.d.ts +4 -3
- package/api/view/index.js +6 -6
- package/branding/AppBrand.d.ts +2 -2
- package/commons/components/app/AppSkeleton.js +1 -1
- package/commons/components/app/hooks/useAppConfigs.d.ts +2 -2
- package/commons/components/app/hooks/useAppSitemap.d.ts +5 -2
- package/commons/components/breadcrumbs/BreadcrumbIcon.js +1 -1
- package/commons/components/breadcrumbs/Breadcrumbs.d.ts +3 -2
- package/commons/components/display/AppToc.d.ts +2 -1
- package/commons/components/display/AppToc.js +1 -1
- package/commons/components/display/hooks/useAppColor.d.ts +1 -1
- package/commons/components/leftnav/LeftNavDrawer.d.ts +2 -1
- package/commons/components/leftnav/LeftNavDrawer.js +1 -1
- package/commons/components/leftnav/LeftNavGroup.d.ts +2 -1
- package/commons/components/leftnav/LeftNavItem.d.ts +2 -1
- package/commons/components/leftnav/LeftNavItem.js +1 -1
- package/commons/components/notification/Notification.js +1 -1
- package/commons/components/notification/elements/NotificationHeader.js +1 -1
- package/commons/components/notification/elements/NotificationItems.js +1 -1
- package/commons/components/notification/elements/item/NotificationItemAuthor.js +1 -1
- package/commons/components/pages/PageCenter.d.ts +2 -1
- package/commons/components/pages/PageContent.d.ts +2 -1
- package/commons/components/pages/PageFullScreen.d.ts +2 -1
- package/commons/components/search/AppSearch.js +1 -1
- package/commons/components/search/AppSearchInput.d.ts +2 -1
- package/commons/components/search/AppSearchResult.d.ts +2 -1
- package/commons/components/topnav/AppBar.d.ts +2 -1
- package/commons/components/topnav/AppName.d.ts +3 -2
- package/commons/components/topnav/AppSwitcher.d.ts +2 -1
- package/commons/components/topnav/ThemeSelection.d.ts +2 -1
- package/commons/components/topnav/ThemeSelection.js +1 -1
- package/commons/components/topnav/UserProfile.d.ts +2 -1
- package/commons/components/topnav/UserProfile.js +1 -1
- package/commons/components/utils/hooks/useThemeBuilder.d.ts +1 -1
- package/components/app/App.js +52 -12
- package/components/app/drawers/ApiKeyDrawer.js +1 -1
- package/components/app/hooks/useMatchers.d.ts +1 -1
- package/components/app/hooks/useMatchers.js +27 -15
- package/components/app/hooks/useMatchers.test.js +22 -22
- package/components/app/hooks/useTitle.js +6 -6
- package/components/app/providers/AnalyticProvider.js +1 -1
- package/components/app/providers/AvatarProvider.js +1 -1
- package/components/app/providers/FavouritesProvider.js +3 -3
- package/components/app/providers/GridColumnsProvider.d.ts +52 -0
- package/components/app/providers/GridColumnsProvider.js +177 -0
- package/components/app/providers/GridColumnsProvider.test.js +255 -0
- package/components/app/providers/ModalProvider.d.ts +1 -0
- package/components/app/providers/OverviewProvider.js +1 -1
- package/components/app/providers/ParameterProvider.d.ts +25 -3
- package/components/app/providers/ParameterProvider.js +163 -226
- package/components/app/providers/ParameterProvider.test.js +358 -94
- package/components/app/providers/RecordProvider.d.ts +23 -0
- package/components/app/providers/{HitProvider.js → RecordProvider.js} +47 -43
- package/components/app/providers/{HitSearchProvider.d.ts → RecordSearchProvider.d.ts} +6 -6
- package/components/app/providers/{HitSearchProvider.js → RecordSearchProvider.js} +24 -37
- package/components/app/providers/{HitSearchProvider.test.js → RecordSearchProvider.test.js} +52 -71
- package/components/app/providers/SearchResponseProvider.d.ts +21 -0
- package/components/app/providers/SearchResponseProvider.js +81 -0
- package/components/app/providers/SearchResponseProvider.test.d.ts +1 -0
- package/components/app/providers/SearchResponseProvider.test.js +406 -0
- package/components/app/providers/SocketProvider.d.ts +11 -2
- package/components/app/providers/SocketProvider.js +21 -8
- package/components/app/providers/UserListProvider.js +28 -8
- package/components/app/providers/UserListProvider.test.d.ts +1 -0
- package/components/app/providers/UserListProvider.test.js +150 -0
- package/components/app/providers/ViewProvider.js +3 -3
- package/components/app/providers/ViewProvider.test.js +4 -1
- package/components/elements/Comment.js +2 -2
- package/components/elements/ContextMenu.d.ts +56 -0
- package/components/elements/ContextMenu.js +113 -0
- package/components/elements/ContextMenu.test.d.ts +1 -0
- package/components/elements/ContextMenu.test.js +215 -0
- package/components/elements/EditRow.js +4 -4
- package/components/{routes/overviews/OverviewEditor.js → elements/MarkdownEditor.js} +3 -3
- package/components/elements/ObjectDetails.d.ts +6 -0
- package/components/elements/{hit/HitDetails.js → ObjectDetails.js} +17 -17
- package/components/elements/PluginChip.d.ts +1 -1
- package/components/elements/PluginChip.js +0 -1
- package/components/elements/PluginTypography.d.ts +2 -1
- package/components/elements/PluginTypography.js +3 -2
- package/components/elements/UserList.d.ts +5 -2
- package/components/elements/UserList.js +34 -17
- package/components/elements/UserList.test.d.ts +1 -0
- package/components/elements/UserList.test.js +122 -0
- package/components/elements/addons/buttons/CustomIconButton.test.d.ts +1 -0
- package/components/elements/addons/buttons/CustomIconButton.test.js +81 -0
- package/components/elements/addons/buttons/index.d.ts +1 -1
- package/components/elements/addons/layout/FlexOne.d.ts +3 -2
- package/components/elements/addons/layout/FlexPort.d.ts +2 -1
- package/components/elements/addons/layout/FlexVertical.d.ts +2 -1
- package/components/elements/addons/layout/FlexVertical.test.d.ts +1 -0
- package/components/elements/addons/layout/FlexVertical.test.js +32 -0
- package/components/elements/addons/layout/vsbox/VSBoxContent.test.d.ts +1 -0
- package/components/elements/addons/layout/vsbox/VSBoxContent.test.js +26 -0
- package/components/elements/addons/layout/vsbox/VSBoxElement.d.ts +2 -1
- package/components/elements/addons/lists/TuiList.d.ts +2 -1
- package/components/elements/addons/lists/TuiListBase.d.ts +2 -1
- package/components/elements/addons/lists/TuiListElement.d.ts +3 -2
- package/components/elements/addons/lists/TuiListElement.js +0 -1
- package/components/elements/addons/lists/TuiListMenu.d.ts +2 -1
- package/components/elements/addons/lists/TuiListMenu.js +1 -1
- package/components/elements/addons/lists/table/TuiTableHeader.d.ts +3 -2
- package/components/elements/addons/lists/table/index.d.ts +1 -1
- package/components/elements/addons/search/SearchPagination.d.ts +2 -1
- package/components/elements/addons/search/SearchPagination.js +4 -4
- package/components/elements/addons/search/SearchTotal.js +1 -1
- package/components/elements/addons/search/SearchTotal.test.js +5 -3
- package/components/elements/addons/search/phrase/Phrase.js +1 -1
- package/components/elements/addons/search/phrase/WordLexer.test.d.ts +1 -0
- package/components/elements/addons/search/phrase/WordLexer.test.js +55 -0
- package/components/elements/case/CaseCard.d.ts +12 -0
- package/components/elements/case/CaseCard.js +43 -0
- package/components/elements/case/CasePreview.d.ts +6 -0
- package/components/elements/case/CasePreview.js +17 -0
- package/components/elements/case/StatusIcon.d.ts +5 -0
- package/components/elements/case/StatusIcon.js +13 -0
- package/components/elements/display/ActionButton.js +1 -1
- package/components/elements/display/ChipPopper.d.ts +1 -1
- package/components/elements/display/ChipPopper.js +7 -6
- package/components/elements/display/Classification.js +1 -1
- package/components/elements/display/ClassificationChip.d.ts +14 -0
- package/components/elements/display/ClassificationChip.js +36 -0
- package/components/elements/display/HandlebarsMarkdown.js +38 -3
- package/components/elements/display/HowlerAvatar.js +2 -2
- package/components/elements/display/HowlerCard.js +1 -1
- package/components/elements/display/HowlerCard.test.js +5 -9
- package/components/elements/display/Image.js +3 -3
- package/components/elements/display/ItemManager.d.ts +2 -2
- package/components/elements/display/ItemManager.js +3 -3
- package/components/elements/display/Markdown.js +2 -2
- package/components/elements/display/Modal.js +2 -0
- package/components/elements/display/QueryResultText.d.ts +1 -0
- package/components/elements/display/QueryResultText.js +2 -2
- package/components/elements/display/handlebars/helpers.d.ts +4 -0
- package/components/elements/display/handlebars/helpers.js +134 -35
- package/components/elements/display/json/JSONViewer.js +2 -2
- package/components/elements/display/modals/RationaleModal.js +2 -2
- package/components/elements/display/modals/RationaleModal.test.js +1 -1
- package/components/elements/event/EventCard.d.ts +6 -0
- package/components/elements/event/EventCard.js +22 -0
- package/components/elements/event/EventPreview.d.ts +6 -0
- package/components/elements/event/EventPreview.js +12 -0
- package/components/elements/hit/HitActions.d.ts +1 -1
- package/components/elements/hit/HitActions.js +5 -5
- package/components/elements/hit/HitBanner.d.ts +1 -0
- package/components/elements/hit/HitBanner.js +32 -50
- package/components/elements/hit/HitCard.d.ts +4 -0
- package/components/elements/hit/HitCard.js +7 -7
- package/components/elements/hit/HitLabels.js +3 -3
- package/components/elements/hit/HitLabels.test.d.ts +1 -0
- package/components/elements/hit/HitLabels.test.js +77 -0
- package/components/elements/hit/HitLinks.d.ts +5 -4
- package/components/elements/hit/HitLinks.js +28 -10
- package/components/elements/hit/HitNotebooks.js +32 -31
- package/components/elements/hit/HitOutline.d.ts +1 -0
- package/components/elements/hit/HitOutline.js +4 -4
- package/components/elements/hit/HitOverview.js +2 -2
- package/components/elements/hit/{HitQuickSearch.d.ts → HitPreview.d.ts} +3 -3
- package/components/elements/hit/{HitQuickSearch.js → HitPreview.js} +11 -5
- package/components/elements/hit/HitSummary.d.ts +2 -1
- package/components/elements/hit/HitSummary.js +8 -7
- package/components/elements/hit/NotebookTooltip.d.ts +3 -0
- package/components/elements/hit/NotebookTooltip.js +8 -0
- package/components/elements/hit/PivotTooltip.d.ts +7 -0
- package/components/elements/hit/PivotTooltip.js +9 -0
- package/components/elements/hit/RelatedLinkTooltip.d.ts +6 -0
- package/components/elements/hit/RelatedLinkTooltip.js +8 -0
- package/components/elements/hit/ResolvePivotUrl.d.ts +4 -0
- package/components/elements/hit/ResolvePivotUrl.js +22 -0
- package/components/elements/hit/actions/ButtonActions.js +1 -3
- package/components/elements/hit/aggregate/HitGraph.js +9 -9
- package/components/elements/hit/elements/AnalyticLink.d.ts +9 -0
- package/components/elements/hit/elements/AnalyticLink.js +22 -0
- package/components/elements/hit/elements/{HitUsers.d.ts → Assigned.d.ts} +2 -4
- package/components/elements/hit/elements/Assigned.js +35 -0
- package/components/elements/hit/elements/Assigned.test.d.ts +1 -0
- package/components/elements/hit/elements/Assigned.test.js +65 -0
- package/components/{routes/hits/search → elements/hit}/grid/AddColumnModal.js +6 -5
- package/components/{routes/hits/search → elements/hit}/grid/ColumnHeader.d.ts +2 -1
- package/components/{routes/hits/search → elements/hit}/grid/ColumnHeader.js +3 -3
- package/components/{routes/hits/search → elements/hit}/grid/EnhancedCell.d.ts +2 -1
- package/components/{routes/hits/search → elements/hit}/grid/EnhancedCell.js +2 -2
- package/components/{routes/hits/search/grid/HitRow.d.ts → elements/hit/grid/RecordRow.d.ts} +4 -3
- package/components/{routes/hits/search/grid/HitRow.js → elements/hit/grid/RecordRow.js} +12 -10
- package/components/elements/hit/grid/RecordTable.d.ts +13 -0
- package/components/elements/hit/grid/RecordTable.js +84 -0
- package/components/elements/hit/outlines/DefaultOutline.js +2 -4
- package/components/elements/hit/related/PivotLink.d.ts +3 -0
- package/components/elements/hit/related/PivotLink.js +6 -3
- package/components/elements/hit/related/RelatedLink.d.ts +1 -0
- package/components/elements/hit/related/RelatedLink.js +18 -15
- package/components/elements/hit/related/RelatedRecords.js +63 -0
- package/components/elements/{hit/HitComments.d.ts → record/RecordComments.d.ts} +5 -4
- package/components/elements/{hit/HitComments.js → record/RecordComments.js} +33 -34
- package/components/{routes/hits/search/HitContextMenu.d.ts → elements/record/RecordContextMenu.d.ts} +3 -3
- package/components/elements/record/RecordContextMenu.js +268 -0
- package/components/elements/record/RecordContextMenu.test.d.ts +1 -0
- package/components/{routes/hits/search/HitContextMenu.test.js → elements/record/RecordContextMenu.test.js} +143 -49
- package/components/elements/record/RecordRelated.d.ts +7 -0
- package/components/elements/record/RecordRelated.js +34 -0
- package/components/elements/{hit/HitWorklog.d.ts → record/RecordWorklog.d.ts} +4 -3
- package/components/elements/{hit/HitWorklog.js → record/RecordWorklog.js} +16 -14
- package/components/elements/search/FuzzySearchBar.d.ts +7 -0
- package/components/elements/search/FuzzySearchBar.js +33 -0
- package/components/elements/search/FuzzySearchBar.test.d.ts +1 -0
- package/components/elements/search/FuzzySearchBar.test.js +87 -0
- package/components/elements/view/LayoutToggle.d.ts +8 -0
- package/components/elements/view/LayoutToggle.js +12 -0
- package/components/elements/view/ViewTitle.d.ts +4 -0
- package/components/elements/view/ViewTitle.js +13 -3
- package/components/hooks/useHitActions.d.ts +1 -1
- package/components/hooks/useHitActions.js +5 -5
- package/components/hooks/useLocalStorage.js +1 -1
- package/components/hooks/useLocalStorageItem.test.js +2 -2
- package/components/hooks/useMyApi.d.ts +1 -1
- package/components/hooks/useMyChart.d.ts +23 -23
- package/components/hooks/useMyPreferences.js +10 -1
- package/components/hooks/useMySearch.js +2 -2
- package/components/hooks/useMySitemap.js +3 -1
- package/components/hooks/useMySnackbar.js +1 -1
- package/components/hooks/useMyTheme.js +9 -2
- package/components/hooks/useMyTheme.test.d.ts +1 -0
- package/components/hooks/useMyTheme.test.js +35 -0
- package/components/hooks/useMyUserFunctions.d.ts +21 -21
- package/components/hooks/{useHitSelection.d.ts → useRecordSelection.d.ts} +2 -2
- package/components/hooks/{useHitSelection.js → useRecordSelection.js} +12 -33
- package/components/hooks/useRelatedRecords.d.ts +13 -0
- package/components/hooks/useRelatedRecords.js +32 -0
- package/components/logins/Login.js +1 -1
- package/components/logins/auth/OAuthLogin.js +1 -1
- package/components/logins/hooks/useLogin.js +2 -2
- package/components/routes/ErrorBoundary.d.ts +2 -13
- package/components/routes/ErrorBoundary.js +12 -1
- package/components/routes/ErrorBoundary.test.js +27 -4
- package/components/routes/action/edit/ActionEditor.js +6 -6
- package/components/routes/action/shared/OperationEntry.js +1 -1
- package/components/routes/action/shared/OperationStep.js +1 -1
- package/components/routes/action/useMyActionFunctions.js +6 -3
- package/components/routes/action/view/ActionDetails.js +9 -3
- package/components/routes/action/view/ActionSearch.js +25 -19
- package/components/routes/admin/users/UserEditor.js +1 -1
- package/components/routes/admin/users/UserSearch.js +5 -5
- package/components/routes/advanced/QueryBuilder.js +6 -29
- package/components/routes/advanced/QueryEditor.js +3 -3
- package/components/routes/advanced/eqlTokenProvider.test.d.ts +1 -0
- package/components/routes/advanced/eqlTokenProvider.test.js +34 -0
- package/components/routes/advanced/historyCompletionProvider.js +3 -3
- package/components/routes/advanced/luceneCompletionProvider.js +1 -1
- package/components/routes/advanced/luceneTokenProvider.test.d.ts +1 -0
- package/components/routes/advanced/luceneTokenProvider.test.js +34 -0
- package/components/routes/analytics/AnalyticComments.js +3 -5
- package/components/routes/analytics/AnalyticDetails.js +8 -56
- package/components/routes/analytics/AnalyticHitComments.js +1 -1
- package/components/routes/analytics/AnalyticHitComments.test.js +1 -1
- package/components/routes/analytics/AnalyticOverview.js +2 -2
- package/components/routes/analytics/AnalyticOverviews.js +1 -1
- package/components/routes/analytics/AnalyticSearch.js +16 -25
- package/components/routes/analytics/AnalyticTemplates.js +1 -1
- package/components/routes/analytics/TriageSettings.js +2 -2
- package/components/routes/analytics/widgets/Assessment.js +1 -1
- package/components/routes/analytics/widgets/Created.js +1 -1
- package/components/routes/analytics/widgets/Escalation.js +1 -1
- package/components/routes/analytics/widgets/Stacked.js +1 -1
- package/components/routes/cases/CaseViewer.d.ts +2 -0
- package/components/routes/cases/CaseViewer.js +44 -0
- package/components/routes/cases/CaseViewer.test.d.ts +1 -0
- package/components/routes/cases/CaseViewer.test.js +156 -0
- package/components/routes/cases/Cases.d.ts +2 -0
- package/components/routes/cases/Cases.js +140 -0
- package/components/routes/cases/constants.d.ts +6 -0
- package/components/routes/cases/constants.js +6 -0
- package/components/routes/cases/detail/AlertPanel.d.ts +6 -0
- package/components/routes/cases/detail/AlertPanel.js +34 -0
- package/components/routes/cases/detail/AlertPanel.test.d.ts +1 -0
- package/components/routes/cases/detail/AlertPanel.test.js +107 -0
- package/components/routes/cases/detail/CaseDashboard.d.ts +7 -0
- package/components/routes/cases/detail/CaseDashboard.js +66 -0
- package/components/routes/cases/detail/CaseDashboard.test.d.ts +1 -0
- package/components/routes/cases/detail/CaseDashboard.test.js +218 -0
- package/components/routes/cases/detail/CaseDetails.d.ts +6 -0
- package/components/routes/cases/detail/CaseDetails.js +79 -0
- package/components/routes/cases/detail/CaseDetails.test.d.ts +1 -0
- package/components/routes/cases/detail/CaseDetails.test.js +145 -0
- package/components/routes/cases/detail/CaseObservables.d.ts +6 -0
- package/components/routes/cases/detail/CaseObservables.js +127 -0
- package/components/routes/cases/detail/CaseObservables.test.d.ts +1 -0
- package/components/routes/cases/detail/CaseObservables.test.js +167 -0
- package/components/routes/cases/detail/CaseOverview.d.ts +7 -0
- package/components/routes/cases/detail/CaseOverview.js +40 -0
- package/components/routes/cases/detail/CaseRules.d.ts +7 -0
- package/components/routes/cases/detail/CaseRules.js +55 -0
- package/components/routes/cases/detail/CaseRules.test.d.ts +1 -0
- package/components/routes/cases/detail/CaseRules.test.js +238 -0
- package/components/routes/cases/detail/CaseSearch.d.ts +3 -0
- package/components/routes/cases/detail/CaseSearch.js +78 -0
- package/components/routes/cases/detail/CaseSearch.test.d.ts +1 -0
- package/components/routes/cases/detail/CaseSearch.test.js +154 -0
- package/components/routes/cases/detail/CaseSidebar.d.ts +8 -0
- package/components/routes/cases/detail/CaseSidebar.js +147 -0
- package/components/routes/cases/detail/CaseSidebar.test.d.ts +1 -0
- package/components/routes/cases/detail/CaseSidebar.test.js +155 -0
- package/components/routes/cases/detail/CaseTask.d.ts +14 -0
- package/components/routes/cases/detail/CaseTask.js +71 -0
- package/components/routes/cases/detail/CaseTask.test.d.ts +1 -0
- package/components/routes/cases/detail/CaseTask.test.js +143 -0
- package/components/routes/cases/detail/CaseTimeline.d.ts +12 -0
- package/components/routes/cases/detail/CaseTimeline.js +120 -0
- package/components/routes/cases/detail/CaseTimeline.test.d.ts +1 -0
- package/components/routes/cases/detail/CaseTimeline.test.js +319 -0
- package/components/routes/cases/detail/CreateRuleDialog.d.ts +9 -0
- package/components/routes/cases/detail/CreateRuleDialog.js +145 -0
- package/components/routes/cases/detail/CreateRuleDialog.test.d.ts +1 -0
- package/components/routes/cases/detail/CreateRuleDialog.test.js +218 -0
- package/components/routes/cases/detail/ItemPage.d.ts +6 -0
- package/components/routes/cases/detail/ItemPage.js +100 -0
- package/components/routes/cases/detail/ItemPage.test.d.ts +1 -0
- package/components/routes/cases/detail/ItemPage.test.js +238 -0
- package/components/routes/cases/detail/MarkdownPage.d.ts +8 -0
- package/components/routes/cases/detail/MarkdownPage.js +63 -0
- package/components/routes/cases/detail/MarkdownPage.test.d.ts +1 -0
- package/components/routes/cases/detail/MarkdownPage.test.js +116 -0
- package/components/routes/cases/detail/RelatedCasePanel.d.ts +6 -0
- package/components/routes/cases/detail/RelatedCasePanel.js +34 -0
- package/components/routes/cases/detail/RelatedCasePanel.test.d.ts +1 -0
- package/components/routes/cases/detail/RelatedCasePanel.test.js +115 -0
- package/components/routes/cases/detail/TaskPanel.d.ts +7 -0
- package/components/routes/cases/detail/TaskPanel.js +95 -0
- package/components/routes/cases/detail/TaskPanel.test.d.ts +1 -0
- package/components/routes/cases/detail/TaskPanel.test.js +145 -0
- package/components/routes/cases/detail/aggregates/CaseAggregate.d.ts +11 -0
- package/components/routes/cases/detail/aggregates/CaseAggregate.js +24 -0
- package/components/routes/cases/detail/aggregates/SourceAggregate.d.ts +6 -0
- package/components/routes/cases/detail/aggregates/SourceAggregate.js +26 -0
- package/components/routes/cases/detail/observables/Observable.d.ts +8 -0
- package/components/routes/cases/detail/observables/Observable.js +14 -0
- package/components/routes/cases/detail/observables/Observable.test.d.ts +1 -0
- package/components/routes/cases/detail/observables/Observable.test.js +80 -0
- package/components/routes/cases/detail/observables/ObservableTable.d.ts +7 -0
- package/components/routes/cases/detail/observables/ObservableTable.js +61 -0
- package/components/routes/cases/detail/observables/ObservableTable.test.d.ts +1 -0
- package/components/routes/cases/detail/observables/ObservableTable.test.js +97 -0
- package/components/routes/cases/detail/sidebar/CaseFolder.d.ts +22 -0
- package/components/routes/cases/detail/sidebar/CaseFolder.js +105 -0
- package/components/routes/cases/detail/sidebar/CaseFolder.test.d.ts +1 -0
- package/components/routes/cases/detail/sidebar/CaseFolder.test.js +98 -0
- package/components/routes/cases/detail/sidebar/CaseFolderContextMenu.d.ts +32 -0
- package/components/routes/cases/detail/sidebar/CaseFolderContextMenu.js +99 -0
- package/components/routes/cases/detail/sidebar/CaseFolderContextMenu.test.d.ts +1 -0
- package/components/routes/cases/detail/sidebar/CaseFolderContextMenu.test.js +117 -0
- package/components/routes/cases/detail/sidebar/FolderEntry.d.ts +25 -0
- package/components/routes/cases/detail/sidebar/FolderEntry.js +89 -0
- package/components/routes/cases/detail/sidebar/FolderEntry.test.d.ts +1 -0
- package/components/routes/cases/detail/sidebar/FolderEntry.test.js +81 -0
- package/components/routes/cases/detail/sidebar/RootDropZone.d.ts +5 -0
- package/components/routes/cases/detail/sidebar/RootDropZone.js +33 -0
- package/components/routes/cases/detail/sidebar/types.d.ts +9 -0
- package/components/routes/cases/detail/sidebar/utils.d.ts +10 -0
- package/components/routes/cases/detail/sidebar/utils.js +51 -0
- package/components/routes/cases/detail/sidebar/utils.test.d.ts +1 -0
- package/components/routes/cases/detail/sidebar/utils.test.js +82 -0
- package/components/routes/cases/detail/types.d.ts +22 -0
- package/components/routes/cases/detail/utils.d.ts +28 -0
- package/components/routes/cases/detail/utils.js +117 -0
- package/components/routes/cases/detail/utils.test.d.ts +1 -0
- package/components/routes/cases/detail/utils.test.js +166 -0
- package/components/routes/cases/hooks/useCase.d.ts +13 -0
- package/components/routes/cases/hooks/useCase.js +67 -0
- package/components/routes/cases/hooks/useCase.test.d.ts +1 -0
- package/components/routes/cases/hooks/useCase.test.js +170 -0
- package/components/routes/cases/modals/AddRecordToCaseModal.d.ts +7 -0
- package/components/routes/cases/modals/AddRecordToCaseModal.js +57 -0
- package/components/routes/cases/modals/AddRecordToCaseModal.test.d.ts +1 -0
- package/components/routes/cases/modals/AddRecordToCaseModal.test.js +309 -0
- package/components/routes/cases/modals/AddToCaseModal.d.ts +9 -0
- package/components/routes/cases/modals/AddToCaseModal.js +72 -0
- package/components/routes/cases/modals/CaseRecordRow.d.ts +9 -0
- package/components/routes/cases/modals/CaseRecordRow.js +14 -0
- package/components/routes/cases/modals/CreateCaseModal.d.ts +7 -0
- package/components/routes/cases/modals/CreateCaseModal.js +53 -0
- package/components/routes/cases/modals/CreateCaseModal.test.d.ts +1 -0
- package/components/routes/cases/modals/CreateCaseModal.test.js +319 -0
- package/components/routes/cases/modals/RenameItemModal.d.ts +9 -0
- package/components/routes/cases/modals/RenameItemModal.js +44 -0
- package/components/routes/cases/modals/ResolveModal.d.ts +7 -0
- package/components/routes/cases/modals/ResolveModal.js +120 -0
- package/components/routes/cases/modals/ResolveModal.test.d.ts +1 -0
- package/components/routes/cases/modals/ResolveModal.test.js +520 -0
- package/components/routes/cases/modals/hooks.d.ts +7 -0
- package/components/routes/cases/modals/hooks.js +40 -0
- package/components/routes/cases/modals/types.d.ts +13 -0
- package/components/routes/cases/search/CaseAssigneeFilter.d.ts +6 -0
- package/components/routes/cases/search/CaseAssigneeFilter.js +33 -0
- package/components/routes/cases/search/CaseAssigneeFilter.test.d.ts +1 -0
- package/components/routes/cases/search/CaseAssigneeFilter.test.js +127 -0
- package/components/routes/cases/search/CaseDateFilter.d.ts +13 -0
- package/components/routes/cases/search/CaseDateFilter.js +26 -0
- package/components/routes/cases/search/CaseDateFilter.test.d.ts +1 -0
- package/components/routes/cases/search/CaseDateFilter.test.js +115 -0
- package/components/routes/cases/search/CaseStatusFilter.d.ts +6 -0
- package/components/routes/cases/search/CaseStatusFilter.js +13 -0
- package/components/routes/cases/search/CaseStatusFilter.test.d.ts +1 -0
- package/components/routes/cases/search/CaseStatusFilter.test.js +86 -0
- package/components/routes/cases/utils.d.ts +3 -0
- package/components/routes/cases/utils.js +21 -0
- package/components/routes/dossiers/DossierEditor.js +4 -4
- package/components/routes/dossiers/DossierEditor.test.js +2 -2
- package/components/routes/dossiers/Dossiers.js +16 -14
- package/components/routes/dossiers/PivotForm.js +2 -4
- package/components/routes/events/EventViewer.d.ts +7 -0
- package/components/routes/events/EventViewer.js +24 -0
- package/components/routes/help/ApiDocumentation.js +2 -2
- package/components/routes/help/HitBannerDocumentation.js +2 -1
- package/components/routes/help/HitDocumentation.js +1 -3
- package/components/routes/help/HitSchemaDocumentation.js +1 -1
- package/components/routes/help/OverviewDocumentation.d.ts +1 -1
- package/components/routes/help/OverviewDocumentation.js +0 -1
- package/components/routes/help/RetentionDocumentation.js +2 -2
- package/components/routes/help/SearchDocumentation.js +1 -1
- package/components/routes/help/markdown/en/client.md.js +1 -1
- package/components/routes/help/markdown/fr/client.md.js +1 -1
- package/components/routes/hits/search/InformationPane.d.ts +1 -0
- package/components/routes/hits/search/InformationPane.js +52 -65
- package/components/routes/hits/search/QuerySettings.js +2 -1
- package/components/routes/hits/search/QuerySettings.test.js +19 -17
- package/components/routes/hits/search/{HitBrowser.js → RecordBrowser.js} +13 -12
- package/components/routes/hits/search/{HitQuery.d.ts → RecordQuery.d.ts} +2 -2
- package/components/routes/hits/search/{HitQuery.js → RecordQuery.js} +6 -6
- package/components/routes/hits/search/SearchPane.js +28 -50
- package/components/routes/hits/search/ViewLink.js +7 -6
- package/components/routes/hits/search/ViewLink.test.js +8 -9
- package/components/routes/hits/search/grid/RecordGrid.d.ts +3 -0
- package/components/routes/hits/search/grid/RecordGrid.js +64 -0
- package/components/routes/hits/search/shared/CustomSort.js +1 -1
- package/components/routes/hits/search/shared/CustomSpan.test.js +3 -4
- package/components/routes/hits/search/shared/HitFilter.d.ts +1 -1
- package/components/routes/hits/search/shared/HitSort.d.ts +1 -1
- package/components/routes/hits/search/shared/HitSort.js +2 -1
- package/components/routes/hits/search/shared/IndexPicker.d.ts +8 -0
- package/components/routes/hits/search/shared/IndexPicker.js +21 -0
- package/components/routes/hits/search/shared/LayoutSettings.js +25 -0
- package/components/routes/hits/search/shared/SearchActionMenu.d.ts +4 -0
- package/components/routes/hits/search/shared/SearchActionMenu.js +11 -0
- package/components/routes/hits/search/shared/SearchSpan.d.ts +1 -1
- package/components/routes/hits/search/shared/SearchSpan.js +1 -1
- package/components/routes/hits/view/HitViewer.js +16 -17
- package/components/routes/home/AddNewCard.js +2 -2
- package/components/routes/home/AddNewCard.test.js +20 -2
- package/components/routes/home/AnalyticCard.js +1 -1
- package/components/routes/home/EntryWrapper.js +1 -1
- package/components/routes/home/HomeSettings.js +1 -1
- package/components/routes/home/HomeSettings.test.d.ts +1 -0
- package/components/routes/home/HomeSettings.test.js +44 -0
- package/components/routes/home/ViewCard.js +52 -46
- package/components/routes/home/ViewRefresh.test.js +1 -1
- package/components/routes/home/index.js +2 -2
- package/components/routes/overviews/OverviewCard.js +1 -1
- package/components/routes/overviews/OverviewViewer.js +13 -10
- package/components/routes/overviews/Overviews.js +16 -14
- package/components/routes/overviews/markdownExtendedTokenProvider.js +15 -15
- package/components/routes/overviews/markdownExtendedTokenProvider.test.d.ts +1 -0
- package/components/routes/overviews/markdownExtendedTokenProvider.test.js +50 -0
- package/components/routes/settings/ProfileSection.js +2 -2
- package/components/routes/templates/TemplateEditor.d.ts +3 -2
- package/components/routes/templates/TemplateEditor.js +1 -1
- package/components/routes/templates/TemplateViewer.js +10 -5
- package/components/routes/templates/Templates.js +19 -14
- package/components/routes/views/ViewComposer.js +78 -26
- package/components/routes/views/Views.js +17 -14
- package/i18n.js +1 -1
- package/index.css +4 -0
- package/index.d.ts +1 -1
- package/index.js +1 -1
- package/locales/en/translation.json +188 -34
- package/locales/fr/translation.json +186 -32
- package/models/WithMetadata.d.ts +2 -1
- package/models/entities/generated/Analytic.d.ts +0 -3
- package/models/entities/generated/ApiType.d.ts +3 -1
- package/models/entities/generated/AttachmentsFile.d.ts +12 -0
- package/models/entities/generated/Case.d.ts +29 -0
- package/models/entities/generated/Column.d.ts +7 -0
- package/models/entities/generated/DestinationOriginal.d.ts +19 -0
- package/models/entities/generated/ECSEvent.d.ts +31 -0
- package/models/entities/generated/EmailAttachment.d.ts +8 -0
- package/models/entities/generated/EmailParent.d.ts +19 -0
- package/models/entities/generated/Enrichments.d.ts +7 -0
- package/models/entities/generated/EnrichmentsIndicator.d.ts +21 -0
- package/models/entities/generated/Event.d.ts +80 -26
- package/models/entities/generated/EventCloud.d.ts +20 -0
- package/models/entities/generated/EventDestination.d.ts +23 -0
- package/models/entities/generated/EventEmail.d.ts +30 -0
- package/models/entities/generated/EventFile.d.ts +36 -0
- package/models/entities/generated/EventHowler.d.ts +42 -0
- package/models/entities/generated/EventHttp.d.ts +11 -0
- package/models/entities/generated/EventObserver.d.ts +21 -0
- package/models/entities/generated/EventOrganization.d.ts +7 -0
- package/models/entities/generated/EventProcess.d.ts +34 -0
- package/models/entities/generated/EventSource.d.ts +23 -0
- package/models/entities/generated/EventThreat.d.ts +21 -0
- package/models/entities/generated/EventTls.d.ts +12 -0
- package/models/entities/generated/Hit.d.ts +3 -2
- package/models/entities/generated/Host.d.ts +1 -0
- package/models/entities/generated/Howler.d.ts +1 -6
- package/models/entities/generated/HttpResponse.d.ts +11 -0
- package/models/entities/generated/Item.d.ts +12 -0
- package/models/entities/generated/ObserverIngress.d.ts +9 -0
- package/models/entities/generated/Rule.d.ts +8 -9
- package/models/entities/generated/Settings.d.ts +4 -0
- package/models/entities/generated/Task.d.ts +10 -0
- package/models/entities/generated/Threat.d.ts +2 -2
- package/models/entities/generated/{Enrichment.d.ts → ThreatEnrichment.d.ts} +1 -1
- package/models/entities/generated/View.d.ts +1 -0
- package/models/socket/CaseUpdate.d.ts +5 -0
- package/models/socket/ViewersUpdate.d.ts +4 -0
- package/package.json +156 -137
- package/plugins/clue/components/ClueLeadForm.js +1 -1
- package/plugins/clue/components/CluePivotForm.js +2 -2
- package/plugins/clue/components/ClueTypography.js +2 -2
- package/plugins/clue/helpers.js +4 -4
- package/plugins/clue/index.d.ts +3 -2
- package/plugins/clue/index.js +0 -1
- package/plugins/clue/utils.d.ts +2 -1
- package/rest/AxiosClient.test.d.ts +1 -0
- package/rest/AxiosClient.test.js +185 -0
- package/tests/mocks.d.ts +11 -1
- package/tests/mocks.js +12 -7
- package/tests/server-handlers.js +11 -1
- package/tests/utils.d.ts +4 -0
- package/tests/utils.js +21 -0
- package/utils/Throttler.test.js +2 -2
- package/utils/actionUtils.d.ts +3 -3
- package/utils/classificationParser.d.ts +195 -0
- package/utils/classificationParser.js +680 -0
- package/utils/constants.d.ts +4 -3
- package/utils/constants.js +6 -0
- package/utils/localStorage.js +1 -1
- package/utils/menuUtils.js +0 -4
- package/utils/recordFunctions.d.ts +3 -0
- package/utils/recordFunctions.js +8 -0
- package/utils/recordFunctions.test.d.ts +1 -0
- package/utils/{hitFunctions.test.js → recordFunctions.test.js} +1 -1
- package/utils/socketUtils.d.ts +14 -0
- package/utils/socketUtils.js +17 -1
- package/utils/socketUtils.test.js +49 -16
- package/utils/stringUtils.d.ts +1 -0
- package/utils/stringUtils.js +7 -0
- package/utils/stringUtils.test.js +22 -2
- package/utils/typeUtils.d.ts +7 -0
- package/utils/typeUtils.js +27 -0
- package/utils/utils.d.ts +1 -1
- package/utils/utils.js +2 -2
- package/utils/utils.test.js +119 -2
- package/utils/viewUtils.js +3 -0
- package/utils/xsrf.js +1 -1
- package/api/analytic/rules.d.ts +0 -3
- package/api/analytic/rules.js +0 -8
- package/components/app/providers/HitProvider.d.ts +0 -22
- package/components/elements/display/icons/BundleButton.d.ts +0 -6
- package/components/elements/display/icons/BundleButton.js +0 -32
- package/components/elements/hit/HitRelated.d.ts +0 -6
- package/components/elements/hit/HitRelated.js +0 -7
- package/components/elements/hit/elements/HitUsers.js +0 -33
- package/components/routes/advanced/RuleModal.d.ts +0 -7
- package/components/routes/advanced/RuleModal.js +0 -83
- package/components/routes/analytics/RuleView.d.ts +0 -8
- package/components/routes/analytics/RuleView.js +0 -48
- package/components/routes/help/BundleDocumentation.d.ts +0 -3
- package/components/routes/help/BundleDocumentation.js +0 -12
- package/components/routes/help/markdown/en/bundles.md.js +0 -1
- package/components/routes/help/markdown/fr/bundles.md.js +0 -1
- package/components/routes/hits/search/BundleParentMenu.d.ts +0 -6
- package/components/routes/hits/search/BundleParentMenu.js +0 -32
- package/components/routes/hits/search/BundleScroller.d.ts +0 -2
- package/components/routes/hits/search/BundleScroller.js +0 -6
- package/components/routes/hits/search/HitContextMenu.js +0 -239
- package/components/routes/hits/search/LayoutSettings.js +0 -24
- package/components/routes/hits/search/grid/HitGrid.d.ts +0 -3
- package/components/routes/hits/search/grid/HitGrid.js +0 -132
- package/utils/hitFunctions.d.ts +0 -2
- package/utils/hitFunctions.js +0 -8
- /package/{components/app/providers/HitSearchProvider.test.d.ts → api/socket/viewers.test.d.ts} +0 -0
- /package/components/{routes/hits/search/HitContextMenu.test.d.ts → app/providers/GridColumnsProvider.test.d.ts} +0 -0
- /package/{utils/hitFunctions.test.d.ts → components/app/providers/RecordSearchProvider.test.d.ts} +0 -0
- /package/components/{routes/overviews/OverviewEditor.d.ts → elements/MarkdownEditor.d.ts} +0 -0
- /package/components/{routes/hits/search → elements/hit}/grid/AddColumnModal.d.ts +0 -0
- /package/components/elements/hit/{HitDetails.d.ts → related/RelatedRecords.d.ts} +0 -0
- /package/components/routes/hits/search/{HitBrowser.d.ts → RecordBrowser.d.ts} +0 -0
- /package/components/routes/hits/search/{LayoutSettings.d.ts → shared/LayoutSettings.d.ts} +0 -0
|
@@ -0,0 +1,33 @@
|
|
|
1
|
+
import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
|
|
2
|
+
import { useDndContext, useDroppable } from '@dnd-kit/core';
|
|
3
|
+
import { Inbox } from '@mui/icons-material';
|
|
4
|
+
import { alpha, Box, Typography } from '@mui/material';
|
|
5
|
+
import { useTranslation } from 'react-i18next';
|
|
6
|
+
const RootDropZone = ({ caseId }) => {
|
|
7
|
+
const { t } = useTranslation();
|
|
8
|
+
const { active } = useDndContext();
|
|
9
|
+
const { setNodeRef, isOver } = useDroppable({
|
|
10
|
+
id: `${caseId}:folder:__root__`,
|
|
11
|
+
data: { path: '', caseId, folderId: null }
|
|
12
|
+
});
|
|
13
|
+
if (!active) {
|
|
14
|
+
return null;
|
|
15
|
+
}
|
|
16
|
+
return (_jsxs(Box, { ref: setNodeRef, sx: theme => ({
|
|
17
|
+
minHeight: '250px',
|
|
18
|
+
display: 'flex',
|
|
19
|
+
flexDirection: 'column',
|
|
20
|
+
alignItems: 'center',
|
|
21
|
+
justifyContent: 'center',
|
|
22
|
+
gap: 1,
|
|
23
|
+
border: '2px dashed',
|
|
24
|
+
borderColor: isOver ? theme.palette.primary.main : theme.palette.divider,
|
|
25
|
+
borderRadius: 1,
|
|
26
|
+
mx: 1,
|
|
27
|
+
mt: 1,
|
|
28
|
+
transition: theme.transitions.create(['border-color', 'background-color']),
|
|
29
|
+
bgcolor: isOver ? alpha(theme.palette.primary.main, 0.08) : 'transparent',
|
|
30
|
+
color: isOver ? theme.palette.primary.main : theme.palette.text.secondary
|
|
31
|
+
}), children: [_jsx(Inbox, { fontSize: "large", sx: { opacity: 0.6 } }), _jsx(Typography, { variant: "caption", children: t('page.cases.folder.drop.root') })] }));
|
|
32
|
+
};
|
|
33
|
+
export default RootDropZone;
|
|
@@ -0,0 +1,10 @@
|
|
|
1
|
+
import type { Item } from '@cccsaurora/howler-ui/models/entities/generated/Item';
|
|
2
|
+
import type { Tree } from './types';
|
|
3
|
+
/**
|
|
4
|
+
* Build a tree from a flat array of items using parent-based relationships.
|
|
5
|
+
*
|
|
6
|
+
* Folder items (type=folder) become tree nodes whose children are items
|
|
7
|
+
* referencing the folder's `id` as their `parent`.
|
|
8
|
+
* Items with `parent=null` or `parent=undefined` are root-level.
|
|
9
|
+
*/
|
|
10
|
+
export declare const buildTree: (items?: Item[]) => Tree;
|
|
@@ -0,0 +1,51 @@
|
|
|
1
|
+
import { sortBy } from 'lodash-es';
|
|
2
|
+
/**
|
|
3
|
+
* Build a tree from a flat array of items using parent-based relationships.
|
|
4
|
+
*
|
|
5
|
+
* Folder items (type=folder) become tree nodes whose children are items
|
|
6
|
+
* referencing the folder's `id` as their `parent`.
|
|
7
|
+
* Items with `parent=null` or `parent=undefined` are root-level.
|
|
8
|
+
*/
|
|
9
|
+
export const buildTree = (items = []) => {
|
|
10
|
+
const root = { item: null, leaves: [], folders: {} };
|
|
11
|
+
// Index folders by id
|
|
12
|
+
const folderNodes = {};
|
|
13
|
+
const folderItems = items.filter(item => item.type === 'folder');
|
|
14
|
+
for (const folder of folderItems) {
|
|
15
|
+
if (folder.id) {
|
|
16
|
+
folderNodes[folder.id] = {
|
|
17
|
+
leaves: [],
|
|
18
|
+
folders: {},
|
|
19
|
+
item: folder
|
|
20
|
+
};
|
|
21
|
+
}
|
|
22
|
+
}
|
|
23
|
+
// Build folder hierarchy
|
|
24
|
+
for (const folder of folderItems) {
|
|
25
|
+
if (!folder.id) {
|
|
26
|
+
continue;
|
|
27
|
+
}
|
|
28
|
+
const node = folderNodes[folder.id];
|
|
29
|
+
const folderName = folder.name ?? folder.value ?? folder.id;
|
|
30
|
+
if (!folderName) {
|
|
31
|
+
continue;
|
|
32
|
+
}
|
|
33
|
+
if (folder.parent && folderNodes[folder.parent]) {
|
|
34
|
+
folderNodes[folder.parent].folders[folderName] = node;
|
|
35
|
+
}
|
|
36
|
+
else {
|
|
37
|
+
root.folders[folderName] = node;
|
|
38
|
+
}
|
|
39
|
+
}
|
|
40
|
+
// Place non-folder items
|
|
41
|
+
const nonFolderItems = items.filter(item => item.type !== 'folder');
|
|
42
|
+
for (const item of sortBy(nonFolderItems, 'value')) {
|
|
43
|
+
if (item.parent && folderNodes[item.parent]) {
|
|
44
|
+
folderNodes[item.parent].leaves.push(item);
|
|
45
|
+
}
|
|
46
|
+
else {
|
|
47
|
+
root.leaves.push(item);
|
|
48
|
+
}
|
|
49
|
+
}
|
|
50
|
+
return root;
|
|
51
|
+
};
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export {};
|
|
@@ -0,0 +1,82 @@
|
|
|
1
|
+
import { describe, expect, it } from 'vitest';
|
|
2
|
+
import { buildTree } from './utils';
|
|
3
|
+
describe('buildTree', () => {
|
|
4
|
+
it('returns an empty tree for no items', () => {
|
|
5
|
+
const result = buildTree();
|
|
6
|
+
expect(result.leaves).toEqual([]);
|
|
7
|
+
expect(result.folders).toEqual({});
|
|
8
|
+
});
|
|
9
|
+
it('returns an empty tree for an empty array', () => {
|
|
10
|
+
const result = buildTree([]);
|
|
11
|
+
expect(result.leaves).toEqual([]);
|
|
12
|
+
expect(result.folders).toEqual({});
|
|
13
|
+
});
|
|
14
|
+
it('places items at root when parent is null', () => {
|
|
15
|
+
const item = { id: 'item-1', type: 'hit', value: 'hit-001', parent: null };
|
|
16
|
+
const result = buildTree([item]);
|
|
17
|
+
expect(result.leaves).toEqual([item]);
|
|
18
|
+
});
|
|
19
|
+
it('places items at root when parent is undefined', () => {
|
|
20
|
+
const item = { id: 'item-1', type: 'hit', value: 'hit-001' };
|
|
21
|
+
const result = buildTree([item]);
|
|
22
|
+
expect(result.leaves).toEqual([item]);
|
|
23
|
+
});
|
|
24
|
+
it('places items inside a folder by parent reference', () => {
|
|
25
|
+
const folder = { id: 'folder-1', type: 'folder', value: 'My Folder', name: 'My Folder', parent: null };
|
|
26
|
+
const item = { id: 'item-1', type: 'hit', value: 'hit-001', parent: 'folder-1' };
|
|
27
|
+
const result = buildTree([folder, item]);
|
|
28
|
+
expect(result.folders?.['My Folder']).toBeDefined();
|
|
29
|
+
expect(result.folders?.['My Folder'].leaves).toEqual([item]);
|
|
30
|
+
});
|
|
31
|
+
it('renders empty folders', () => {
|
|
32
|
+
const folder = { id: 'folder-1', type: 'folder', value: 'Empty', name: 'Empty', parent: null };
|
|
33
|
+
const result = buildTree([folder]);
|
|
34
|
+
expect(result.folders?.Empty).toBeDefined();
|
|
35
|
+
expect(result.folders?.Empty.leaves).toEqual([]);
|
|
36
|
+
});
|
|
37
|
+
it('nests folders inside other folders', () => {
|
|
38
|
+
const parent = { id: 'f1', type: 'folder', value: 'Parent', name: 'Parent', parent: null };
|
|
39
|
+
const child = { id: 'f2', type: 'folder', value: 'Child', name: 'Child', parent: 'f1' };
|
|
40
|
+
const item = { id: 'i1', type: 'hit', value: 'hit-1', parent: 'f2' };
|
|
41
|
+
const result = buildTree([parent, child, item]);
|
|
42
|
+
expect(result.folders?.Parent.folders?.Child.leaves).toEqual([item]);
|
|
43
|
+
});
|
|
44
|
+
it('includes folder id in tree nodes', () => {
|
|
45
|
+
const folder = { id: 'folder-1', type: 'folder', value: 'Folder', name: 'Folder', parent: null };
|
|
46
|
+
const result = buildTree([folder]);
|
|
47
|
+
expect(result.folders?.Folder.item?.id).toBe('folder-1');
|
|
48
|
+
});
|
|
49
|
+
it('places orphaned items at root when parent folder is missing', () => {
|
|
50
|
+
const item = { id: 'i1', type: 'hit', value: 'hit-1', parent: 'missing-folder' };
|
|
51
|
+
const result = buildTree([item]);
|
|
52
|
+
expect(result.leaves).toEqual([item]);
|
|
53
|
+
});
|
|
54
|
+
it('handles markdown items', () => {
|
|
55
|
+
const markdown = { id: 'md-1', type: 'markdown', value: '# Hello', parent: null };
|
|
56
|
+
const result = buildTree([markdown]);
|
|
57
|
+
expect(result.leaves).toEqual([markdown]);
|
|
58
|
+
});
|
|
59
|
+
it('handles multiple root-level items', () => {
|
|
60
|
+
const a = { id: 'a', type: 'hit', value: 'hit-a' };
|
|
61
|
+
const b = { id: 'b', type: 'event', value: 'event-b' };
|
|
62
|
+
const result = buildTree([a, b]);
|
|
63
|
+
expect(result.leaves).toHaveLength(2);
|
|
64
|
+
});
|
|
65
|
+
it('handles multiple items in the same folder', () => {
|
|
66
|
+
const folder = { id: 'f1', type: 'folder', value: 'Alerts', name: 'Alerts', parent: null };
|
|
67
|
+
const a = { id: 'a', type: 'hit', value: 'hit-a', parent: 'f1' };
|
|
68
|
+
const b = { id: 'b', type: 'hit', value: 'hit-b', parent: 'f1' };
|
|
69
|
+
const result = buildTree([folder, a, b]);
|
|
70
|
+
expect(result.folders?.Alerts.leaves).toHaveLength(2);
|
|
71
|
+
});
|
|
72
|
+
it('handles items with name field', () => {
|
|
73
|
+
const item = { id: 'i1', type: 'hit', value: 'hit-1', name: 'My Hit' };
|
|
74
|
+
const result = buildTree([item]);
|
|
75
|
+
expect(result.leaves?.[0].name).toBe('My Hit');
|
|
76
|
+
});
|
|
77
|
+
it('preserves all item fields on leaves', () => {
|
|
78
|
+
const rich = { id: 'r1', type: 'reference', value: 'https://example.com', name: 'Example', parent: null };
|
|
79
|
+
const result = buildTree([rich]);
|
|
80
|
+
expect(result.leaves?.[0]).toEqual(rich);
|
|
81
|
+
});
|
|
82
|
+
});
|
|
@@ -0,0 +1,22 @@
|
|
|
1
|
+
export type ObservableType = 'hash' | 'hosts' | 'ip' | 'user' | 'ids' | 'id' | 'uri' | 'signature';
|
|
2
|
+
|
|
3
|
+
export type ObservableRole = 'threat' | 'target' | 'indicator';
|
|
4
|
+
|
|
5
|
+
export interface ObservableSource {
|
|
6
|
+
id: string;
|
|
7
|
+
type: 'hit' | 'event' | 'case';
|
|
8
|
+
path?: string;
|
|
9
|
+
label?: string;
|
|
10
|
+
escalation?: string;
|
|
11
|
+
}
|
|
12
|
+
|
|
13
|
+
export interface ObservableEntry {
|
|
14
|
+
type: ObservableType;
|
|
15
|
+
value: string;
|
|
16
|
+
/** Resolved source metadata for each seenIn item */
|
|
17
|
+
sources?: ObservableSource[];
|
|
18
|
+
/** Classified role of this observable */
|
|
19
|
+
role?: ObservableRole;
|
|
20
|
+
}
|
|
21
|
+
|
|
22
|
+
export type OriginType = 'hit' | 'event';
|
|
@@ -0,0 +1,28 @@
|
|
|
1
|
+
import type { Case } from '@cccsaurora/howler-ui/models/entities/generated/Case';
|
|
2
|
+
import type { Event } from '@cccsaurora/howler-ui/models/entities/generated/Event';
|
|
3
|
+
import type { Hit } from '@cccsaurora/howler-ui/models/entities/generated/Hit';
|
|
4
|
+
import type { Related } from '@cccsaurora/howler-ui/models/entities/generated/Related';
|
|
5
|
+
import type { ObservableEntry, ObservableRole, ObservableSource, ObservableType } from './types';
|
|
6
|
+
/** All Related fields that carry asset values */
|
|
7
|
+
export declare const OBSERVABLE_FIELDS: ObservableType[];
|
|
8
|
+
/** Extract (type, value, seenInId) triples from a record's related field */
|
|
9
|
+
export declare const extractObservables: (related: Related | undefined) => {
|
|
10
|
+
type: ObservableType;
|
|
11
|
+
value: string;
|
|
12
|
+
}[];
|
|
13
|
+
/** Deduplicate observables and resolve their record IDs to case-item sources */
|
|
14
|
+
export declare const buildObservableEntries: (_case: Case, records: (Hit | Event)[]) => ObservableEntry[];
|
|
15
|
+
/**
|
|
16
|
+
* Classify an asset's role based on case-level lists and per-record outline fields.
|
|
17
|
+
*
|
|
18
|
+
* Resolution order:
|
|
19
|
+
* 1. Case-level `threats[]`, `targets[]`, `indicators[]` (authoritative).
|
|
20
|
+
* 2. Per-record `outline.threat` / `outline.target` (exact match).
|
|
21
|
+
* 3. Per-record `outline.indicators[]`, `threat.indicator.ip/.description`.
|
|
22
|
+
* 4. Default: "indicator" — all assets come from `related.*` fields which are IOCs by nature.
|
|
23
|
+
*
|
|
24
|
+
* Comparison is case-insensitive and trimmed.
|
|
25
|
+
*/
|
|
26
|
+
export declare const classifyRole: (value: string, _case: Case, records: Partial<Hit | Event>[]) => ObservableRole;
|
|
27
|
+
/** Resolve source metadata for an observable's record IDs */
|
|
28
|
+
export declare const resolveSource: (record: Hit | Event, _case: Case) => ObservableSource;
|
|
@@ -0,0 +1,117 @@
|
|
|
1
|
+
import { has } from 'lodash-es';
|
|
2
|
+
import { buildPathFromID } from '../utils';
|
|
3
|
+
/** All Related fields that carry asset values */
|
|
4
|
+
export const OBSERVABLE_FIELDS = ['hash', 'hosts', 'ip', 'user', 'ids', 'id', 'uri', 'signature'];
|
|
5
|
+
/** Extract (type, value, seenInId) triples from a record's related field */
|
|
6
|
+
export const extractObservables = (related) => {
|
|
7
|
+
if (!related) {
|
|
8
|
+
return [];
|
|
9
|
+
}
|
|
10
|
+
const results = [];
|
|
11
|
+
for (const field of OBSERVABLE_FIELDS) {
|
|
12
|
+
const raw = related[field];
|
|
13
|
+
if (!raw) {
|
|
14
|
+
continue;
|
|
15
|
+
}
|
|
16
|
+
const values = Array.isArray(raw) ? raw : [raw];
|
|
17
|
+
for (const value of values) {
|
|
18
|
+
if (value) {
|
|
19
|
+
results.push({ type: field, value: String(value) });
|
|
20
|
+
}
|
|
21
|
+
}
|
|
22
|
+
}
|
|
23
|
+
return results;
|
|
24
|
+
};
|
|
25
|
+
/** Deduplicate observables and resolve their record IDs to case-item sources */
|
|
26
|
+
export const buildObservableEntries = (_case, records) => {
|
|
27
|
+
const map = {};
|
|
28
|
+
for (const record of records) {
|
|
29
|
+
const related = record.related ?? record.related;
|
|
30
|
+
const recordId = record.howler?.id ?? record.howler?.id;
|
|
31
|
+
if (!recordId) {
|
|
32
|
+
continue;
|
|
33
|
+
}
|
|
34
|
+
for (const { type, value } of extractObservables(related)) {
|
|
35
|
+
const key = `${type}:${value}`;
|
|
36
|
+
if (!has(map, key)) {
|
|
37
|
+
map[key] = { type, value, sources: [], role: classifyRole(value, _case, records) };
|
|
38
|
+
}
|
|
39
|
+
const entry = map[key];
|
|
40
|
+
if (entry.sources.some(existingSource => existingSource.id === recordId)) {
|
|
41
|
+
continue;
|
|
42
|
+
}
|
|
43
|
+
const source = resolveSource(record, _case);
|
|
44
|
+
if (!source) {
|
|
45
|
+
continue;
|
|
46
|
+
}
|
|
47
|
+
entry.sources.push(source);
|
|
48
|
+
}
|
|
49
|
+
}
|
|
50
|
+
return Object.values(map).filter(Boolean);
|
|
51
|
+
};
|
|
52
|
+
/**
|
|
53
|
+
* Classify an asset's role based on case-level lists and per-record outline fields.
|
|
54
|
+
*
|
|
55
|
+
* Resolution order:
|
|
56
|
+
* 1. Case-level `threats[]`, `targets[]`, `indicators[]` (authoritative).
|
|
57
|
+
* 2. Per-record `outline.threat` / `outline.target` (exact match).
|
|
58
|
+
* 3. Per-record `outline.indicators[]`, `threat.indicator.ip/.description`.
|
|
59
|
+
* 4. Default: "indicator" — all assets come from `related.*` fields which are IOCs by nature.
|
|
60
|
+
*
|
|
61
|
+
* Comparison is case-insensitive and trimmed.
|
|
62
|
+
*/
|
|
63
|
+
export const classifyRole = (value, _case, records) => {
|
|
64
|
+
const normalized = value.trim().toLowerCase();
|
|
65
|
+
// Case-level classification (most authoritative)
|
|
66
|
+
if (_case.threats?.some(t => String(t).trim().toLowerCase() === normalized)) {
|
|
67
|
+
return 'threat';
|
|
68
|
+
}
|
|
69
|
+
if (_case.targets?.some(t => String(t).trim().toLowerCase() === normalized)) {
|
|
70
|
+
return 'target';
|
|
71
|
+
}
|
|
72
|
+
if (_case.indicators?.some(i => String(i).trim().toLowerCase() === normalized)) {
|
|
73
|
+
return 'indicator';
|
|
74
|
+
}
|
|
75
|
+
// Per-record outline checks
|
|
76
|
+
for (const record of records) {
|
|
77
|
+
const howlerOutline = record.howler?.outline;
|
|
78
|
+
if (howlerOutline) {
|
|
79
|
+
if (howlerOutline.threat && howlerOutline.threat.trim().toLowerCase() === normalized) {
|
|
80
|
+
return 'threat';
|
|
81
|
+
}
|
|
82
|
+
if (howlerOutline.target && howlerOutline.target.trim().toLowerCase() === normalized) {
|
|
83
|
+
return 'target';
|
|
84
|
+
}
|
|
85
|
+
if (howlerOutline.indicators?.some(ind => ind.trim().toLowerCase() === normalized)) {
|
|
86
|
+
return 'indicator';
|
|
87
|
+
}
|
|
88
|
+
}
|
|
89
|
+
const indicator = record.threat?.indicator;
|
|
90
|
+
if (indicator) {
|
|
91
|
+
const indicatorIp = indicator.ip?.trim().toLowerCase();
|
|
92
|
+
const indicatorDesc = indicator.description?.trim().toLowerCase();
|
|
93
|
+
if ((indicatorIp && indicatorIp === normalized) || (indicatorDesc && indicatorDesc === normalized)) {
|
|
94
|
+
return 'indicator';
|
|
95
|
+
}
|
|
96
|
+
}
|
|
97
|
+
}
|
|
98
|
+
// Default: assets from related.* are IOCs
|
|
99
|
+
return 'indicator';
|
|
100
|
+
};
|
|
101
|
+
/** Resolve source metadata for an observable's record IDs */
|
|
102
|
+
export const resolveSource = (record, _case) => {
|
|
103
|
+
if (!_case?.items?.length) {
|
|
104
|
+
return null;
|
|
105
|
+
}
|
|
106
|
+
const item = _case.items.find(i => i.value === record.howler.id);
|
|
107
|
+
if (!item) {
|
|
108
|
+
return null;
|
|
109
|
+
}
|
|
110
|
+
return {
|
|
111
|
+
id: record.howler.id,
|
|
112
|
+
type: item.type,
|
|
113
|
+
path: item.id ? buildPathFromID(_case, item.id) : undefined,
|
|
114
|
+
label: item.name ?? item.value,
|
|
115
|
+
escalation: record.howler.escalation
|
|
116
|
+
};
|
|
117
|
+
};
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export {};
|
|
@@ -0,0 +1,166 @@
|
|
|
1
|
+
import { createMockCase, createMockEvent, createMockHit } from '@cccsaurora/howler-ui/tests/utils';
|
|
2
|
+
import { describe, expect, it } from 'vitest';
|
|
3
|
+
import { buildObservableEntries, classifyRole } from './utils';
|
|
4
|
+
// ---------------------------------------------------------------------------
|
|
5
|
+
// Pure logic tests — no React needed
|
|
6
|
+
// ---------------------------------------------------------------------------
|
|
7
|
+
describe('buildObservableEntries', () => {
|
|
8
|
+
it('returns an empty array for records with no related field', () => {
|
|
9
|
+
expect(buildObservableEntries(createMockCase(), [createMockHit({ howler: { id: 'h1' } })])).toEqual([]);
|
|
10
|
+
});
|
|
11
|
+
it('extracts a single IP with a resolved source', () => {
|
|
12
|
+
const _case = createMockCase({
|
|
13
|
+
items: [{ id: 'hit-item', type: 'hit', value: 'h1', name: 'First hit' }]
|
|
14
|
+
});
|
|
15
|
+
const result = buildObservableEntries(_case, [
|
|
16
|
+
createMockHit({ howler: { id: 'h1', escalation: 'evidence' }, related: { ip: ['1.2.3.4'] } })
|
|
17
|
+
]);
|
|
18
|
+
expect(result).toHaveLength(1);
|
|
19
|
+
expect(result[0]).toEqual({
|
|
20
|
+
type: 'ip',
|
|
21
|
+
value: '1.2.3.4',
|
|
22
|
+
role: 'indicator',
|
|
23
|
+
sources: [{ id: 'h1', type: 'hit', path: 'First hit', label: 'First hit', escalation: 'evidence' }]
|
|
24
|
+
});
|
|
25
|
+
});
|
|
26
|
+
it('extracts multiple fields from a single record', () => {
|
|
27
|
+
const result = buildObservableEntries(createMockCase(), [
|
|
28
|
+
createMockHit({ howler: { id: 'h1' }, related: { ip: ['1.2.3.4'], user: ['alice'] } })
|
|
29
|
+
]);
|
|
30
|
+
const types = result.map(a => a.type).sort();
|
|
31
|
+
expect(types).toEqual(['ip', 'user']);
|
|
32
|
+
});
|
|
33
|
+
it('deduplicates the same observable value across multiple records', () => {
|
|
34
|
+
const _case = createMockCase({
|
|
35
|
+
items: [
|
|
36
|
+
{ id: 'hit-item', type: 'hit', value: 'h1', name: 'First hit' },
|
|
37
|
+
{ id: 'event-item', type: 'event', value: 'obs1', name: 'First event' }
|
|
38
|
+
]
|
|
39
|
+
});
|
|
40
|
+
const result = buildObservableEntries(_case, [
|
|
41
|
+
createMockHit({ howler: { id: 'h1' }, related: { ip: ['1.2.3.4'] } }),
|
|
42
|
+
createMockEvent({ howler: { id: 'obs1' }, related: { ip: ['1.2.3.4'] } })
|
|
43
|
+
]);
|
|
44
|
+
expect(result).toHaveLength(1);
|
|
45
|
+
expect(result[0].sources).toEqual([
|
|
46
|
+
{ id: 'h1', type: 'hit', path: 'First hit', label: 'First hit', escalation: undefined },
|
|
47
|
+
{ id: 'obs1', type: 'event', path: 'First event', label: 'First event', escalation: undefined }
|
|
48
|
+
]);
|
|
49
|
+
});
|
|
50
|
+
it('keeps distinct observable values as separate entries', () => {
|
|
51
|
+
const result = buildObservableEntries(createMockCase(), [
|
|
52
|
+
createMockHit({ howler: { id: 'h1' }, related: { ip: ['1.2.3.4'] } }),
|
|
53
|
+
createMockHit({ howler: { id: 'h2' }, related: { ip: ['5.6.7.8'] } })
|
|
54
|
+
]);
|
|
55
|
+
expect(result).toHaveLength(2);
|
|
56
|
+
});
|
|
57
|
+
it('does not duplicate sources when the same record appears twice for the same observable', () => {
|
|
58
|
+
const _case = createMockCase({ items: [{ id: 'hit-item', type: 'hit', value: 'h1' }] });
|
|
59
|
+
const result = buildObservableEntries(_case, [
|
|
60
|
+
createMockHit({ howler: { id: 'h1' }, related: { ip: ['1.2.3.4'] } }),
|
|
61
|
+
createMockHit({ howler: { id: 'h1' }, related: { ip: ['1.2.3.4'] } })
|
|
62
|
+
]);
|
|
63
|
+
expect(result[0].sources).toEqual([{ id: 'h1', type: 'hit', path: 'h1', label: 'h1', escalation: undefined }]);
|
|
64
|
+
});
|
|
65
|
+
it('skips records with no howler.id', () => {
|
|
66
|
+
const noId = { related: { ip: ['1.2.3.4'] } };
|
|
67
|
+
expect(buildObservableEntries(createMockCase(), [noId])).toEqual([]);
|
|
68
|
+
});
|
|
69
|
+
it('handles the scalar `id` field on Related', () => {
|
|
70
|
+
const result = buildObservableEntries(createMockCase(), [
|
|
71
|
+
createMockHit({ howler: { id: 'h1' }, related: { id: 'some-id' } })
|
|
72
|
+
]);
|
|
73
|
+
expect(result).toHaveLength(1);
|
|
74
|
+
expect(result[0]).toEqual({ type: 'id', value: 'some-id', role: 'indicator', sources: [] });
|
|
75
|
+
});
|
|
76
|
+
it('handles array fields like hash, hosts, user, ids, uri, signature', () => {
|
|
77
|
+
const related = {
|
|
78
|
+
hash: ['abc123'],
|
|
79
|
+
hosts: ['host.example.com'],
|
|
80
|
+
user: ['bob'],
|
|
81
|
+
ids: ['guid-1'],
|
|
82
|
+
uri: ['https://example.com'],
|
|
83
|
+
signature: ['rule-X']
|
|
84
|
+
};
|
|
85
|
+
const result = buildObservableEntries(createMockCase(), [createMockHit({ howler: { id: 'h1' }, related })]);
|
|
86
|
+
const types = result.map(a => a.type).sort();
|
|
87
|
+
expect(types).toEqual(['hash', 'hosts', 'ids', 'signature', 'uri', 'user']);
|
|
88
|
+
});
|
|
89
|
+
});
|
|
90
|
+
// ---------------------------------------------------------------------------
|
|
91
|
+
// classifyRole tests
|
|
92
|
+
// ---------------------------------------------------------------------------
|
|
93
|
+
describe('classifyRole', () => {
|
|
94
|
+
const emptyCase = createMockCase();
|
|
95
|
+
it('returns "threat" when value is in case.threats', () => {
|
|
96
|
+
const _case = createMockCase({ threats: ['malicious.exe'] });
|
|
97
|
+
const records = [createMockHit({ howler: { id: 'h1' } })];
|
|
98
|
+
expect(classifyRole('malicious.exe', _case, records)).toBe('threat');
|
|
99
|
+
});
|
|
100
|
+
it('returns "target" when value is in case.targets', () => {
|
|
101
|
+
const _case = createMockCase({ targets: ['server-01'] });
|
|
102
|
+
const records = [createMockHit({ howler: { id: 'h1' } })];
|
|
103
|
+
expect(classifyRole('server-01', _case, records)).toBe('target');
|
|
104
|
+
});
|
|
105
|
+
it('returns "indicator" when value is in case.indicators', () => {
|
|
106
|
+
const _case = createMockCase({ indicators: ['1.2.3.4'] });
|
|
107
|
+
const records = [createMockHit({ howler: { id: 'h1' } })];
|
|
108
|
+
expect(classifyRole('1.2.3.4', _case, records)).toBe('indicator');
|
|
109
|
+
});
|
|
110
|
+
it('returns "threat" when value matches howler.outline.threat', () => {
|
|
111
|
+
const records = [createMockHit({ howler: { id: 'h1', outline: { threat: 'malicious.exe' } } })];
|
|
112
|
+
expect(classifyRole('malicious.exe', emptyCase, records)).toBe('threat');
|
|
113
|
+
});
|
|
114
|
+
it('returns "threat" with case-insensitive matching', () => {
|
|
115
|
+
const records = [createMockHit({ howler: { id: 'h1', outline: { threat: 'Malicious.EXE' } } })];
|
|
116
|
+
expect(classifyRole('malicious.exe', emptyCase, records)).toBe('threat');
|
|
117
|
+
});
|
|
118
|
+
it('does not match threat by substring — only exact match', () => {
|
|
119
|
+
const records = [createMockHit({ howler: { id: 'h1', outline: { threat: 'evil.com dropped payload' } } })];
|
|
120
|
+
// No substring match, defaults to indicator
|
|
121
|
+
expect(classifyRole('evil.com', emptyCase, records)).toBe('indicator');
|
|
122
|
+
});
|
|
123
|
+
it('classifies as indicator when value is in outline.indicators but not in threat/target', () => {
|
|
124
|
+
const records = [
|
|
125
|
+
createMockHit({
|
|
126
|
+
howler: { id: 'h1', outline: { threat: 'actor-x', target: 'server-01', indicators: ['1.2.3.4'] } }
|
|
127
|
+
})
|
|
128
|
+
];
|
|
129
|
+
expect(classifyRole('1.2.3.4', emptyCase, records)).toBe('indicator');
|
|
130
|
+
});
|
|
131
|
+
it('returns "target" when value matches howler.outline.target', () => {
|
|
132
|
+
const records = [createMockHit({ howler: { id: 'h1', outline: { target: 'server-01' } } })];
|
|
133
|
+
expect(classifyRole('server-01', emptyCase, records)).toBe('target');
|
|
134
|
+
});
|
|
135
|
+
it('returns "indicator" when value matches threat.indicator.ip', () => {
|
|
136
|
+
const records = [
|
|
137
|
+
createMockHit({
|
|
138
|
+
howler: { id: 'h1' },
|
|
139
|
+
threat: { indicator: { ip: '10.0.0.1' } }
|
|
140
|
+
})
|
|
141
|
+
];
|
|
142
|
+
expect(classifyRole('10.0.0.1', emptyCase, records)).toBe('indicator');
|
|
143
|
+
});
|
|
144
|
+
it('returns "indicator" when value matches threat.indicator.description', () => {
|
|
145
|
+
const records = [
|
|
146
|
+
createMockHit({
|
|
147
|
+
howler: { id: 'h1' },
|
|
148
|
+
threat: { indicator: { description: 'suspicious-hash-abc123' } }
|
|
149
|
+
})
|
|
150
|
+
];
|
|
151
|
+
expect(classifyRole('suspicious-hash-abc123', emptyCase, records)).toBe('indicator');
|
|
152
|
+
});
|
|
153
|
+
it('defaults to "indicator" when value has no specific classification', () => {
|
|
154
|
+
const records = [createMockHit({ howler: { id: 'h1' }, related: { ip: ['5.6.7.8'] } })];
|
|
155
|
+
expect(classifyRole('5.6.7.8', emptyCase, records)).toBe('indicator');
|
|
156
|
+
});
|
|
157
|
+
it('case-level threats take priority over per-record outline.target', () => {
|
|
158
|
+
const _case = createMockCase({ threats: ['dual-use.exe'] });
|
|
159
|
+
const records = [createMockHit({ howler: { id: 'h1', outline: { target: 'dual-use.exe' } } })];
|
|
160
|
+
expect(classifyRole('dual-use.exe', _case, records)).toBe('threat');
|
|
161
|
+
});
|
|
162
|
+
it('trims whitespace before comparing', () => {
|
|
163
|
+
const records = [createMockHit({ howler: { id: 'h1', outline: { threat: ' evil.com ' } } })];
|
|
164
|
+
expect(classifyRole('evil.com', emptyCase, records)).toBe('threat');
|
|
165
|
+
});
|
|
166
|
+
});
|
|
@@ -0,0 +1,13 @@
|
|
|
1
|
+
import type { Case } from '@cccsaurora/howler-ui/models/entities/generated/Case';
|
|
2
|
+
interface CaseArguments {
|
|
3
|
+
case?: Case;
|
|
4
|
+
caseId?: string;
|
|
5
|
+
}
|
|
6
|
+
interface CaseResult {
|
|
7
|
+
case: Case;
|
|
8
|
+
update: (update: Partial<Case>, publish?: boolean) => Promise<void>;
|
|
9
|
+
loading: boolean;
|
|
10
|
+
missing: boolean;
|
|
11
|
+
}
|
|
12
|
+
declare const useCase: (args: CaseArguments) => CaseResult;
|
|
13
|
+
export default useCase;
|
|
@@ -0,0 +1,67 @@
|
|
|
1
|
+
import api from '@cccsaurora/howler-ui/api';
|
|
2
|
+
import { SocketContext } from '@cccsaurora/howler-ui/components/app/providers/SocketProvider';
|
|
3
|
+
import useMyApi from '@cccsaurora/howler-ui/components/hooks/useMyApi';
|
|
4
|
+
import { useCallback, useContext, useEffect, useId, useState } from 'react';
|
|
5
|
+
import { isCaseUpdate } from '@cccsaurora/howler-ui/utils/socketUtils';
|
|
6
|
+
const useCase = ({ caseId, case: providedCase }) => {
|
|
7
|
+
const { dispatchApi } = useMyApi();
|
|
8
|
+
const { addListener, removeListener } = useContext(SocketContext);
|
|
9
|
+
const listenerId = useId();
|
|
10
|
+
const [loading, setLoading] = useState(false);
|
|
11
|
+
const [missing, setMissing] = useState(false);
|
|
12
|
+
const [_case, setCase] = useState(providedCase);
|
|
13
|
+
const activeCaseId = _case?.case_id ?? caseId;
|
|
14
|
+
useEffect(() => {
|
|
15
|
+
if (providedCase) {
|
|
16
|
+
setCase(providedCase);
|
|
17
|
+
}
|
|
18
|
+
}, [providedCase]);
|
|
19
|
+
useEffect(() => {
|
|
20
|
+
if (caseId) {
|
|
21
|
+
setLoading(true);
|
|
22
|
+
void dispatchApi(api.v2.case.get(caseId), { throwError: false })
|
|
23
|
+
.then(setCase)
|
|
24
|
+
.finally(() => setLoading(false));
|
|
25
|
+
}
|
|
26
|
+
}, [caseId, dispatchApi]);
|
|
27
|
+
useEffect(() => {
|
|
28
|
+
if (!activeCaseId) {
|
|
29
|
+
return;
|
|
30
|
+
}
|
|
31
|
+
const listenerKey = `case-update-${activeCaseId}-${listenerId}`;
|
|
32
|
+
addListener(listenerKey, data => {
|
|
33
|
+
if (isCaseUpdate(data) && data.case.case_id === activeCaseId) {
|
|
34
|
+
setCase(data.case);
|
|
35
|
+
}
|
|
36
|
+
});
|
|
37
|
+
return () => {
|
|
38
|
+
removeListener(listenerKey);
|
|
39
|
+
};
|
|
40
|
+
}, [activeCaseId, addListener, listenerId, removeListener]);
|
|
41
|
+
const update = useCallback(async (_updatedCase, publish = true) => {
|
|
42
|
+
if (!activeCaseId) {
|
|
43
|
+
return;
|
|
44
|
+
}
|
|
45
|
+
try {
|
|
46
|
+
if (publish) {
|
|
47
|
+
setCase(await dispatchApi(api.v2.case.put(activeCaseId, _updatedCase)));
|
|
48
|
+
}
|
|
49
|
+
else {
|
|
50
|
+
setCase(prevCase => {
|
|
51
|
+
if (!prevCase) {
|
|
52
|
+
return prevCase;
|
|
53
|
+
}
|
|
54
|
+
return {
|
|
55
|
+
...prevCase,
|
|
56
|
+
..._updatedCase
|
|
57
|
+
};
|
|
58
|
+
});
|
|
59
|
+
}
|
|
60
|
+
}
|
|
61
|
+
catch {
|
|
62
|
+
setMissing(true);
|
|
63
|
+
}
|
|
64
|
+
}, [activeCaseId, dispatchApi]);
|
|
65
|
+
return { case: _case, update, loading, missing };
|
|
66
|
+
};
|
|
67
|
+
export default useCase;
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export {};
|