@shieldiot/pulse-lib 1.0.412 → 2.0.1409

package/dist/cjs/lib/model/Event.js

@@ -0,0 +1,56 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Event = void 0;
+exports.NewEvent = NewEvent;
+const BaseEntityEx_1 = require("./BaseEntityEx");
+const _1 = require(".");
+// Event entity
+// The Event entity is created by multiple services (e.g. ip reputation, static rules, anomaly detection) by analyzing network statistics (usage and session data) and related to specific IP address.
+// Multiple Events created by the same root cause in a specific timeframe should be represented in a single Alert, this is because in case of a burst, the user
+// should not see hundreds or thousands events but only few alerts pointing to the same root cause (since resolving the root cause of a single alert should resolve all the events)
+// For that reason, the event Id and Alert Id should be predictable values and identical to the same event in a time frame
+// Event ID pattern: [deviceId]:[ruleId]:[1_minute_rounded_timestamp] - to ensure all events on the same device from the same rule within a minute will share the same Id
+// Alert ID pattern: [deviceId]:[ruleId]:[1_month_rounded_timestamp] - to ensure all events on the same device from the same rule within a month will share the same Id to create a single alert
+class Event extends BaseEntityEx_1.BaseEntityEx {
+}
+exports.Event = Event;
+// New empty instance
+function NewEvent() {
+    let result = new Event();
+    result.id = '';
+    result.createdOn = 0;
+    result.updatedOn = 0;
+    result.flag = 0;
+    result.accountId = '';
+    result.streamId = '';
+    result.deviceId = '';
+    result.alertId = '';
+    result.flowId = 0;
+    result.startTime = 0;
+    result.endTime = 0;
+    result.type = 0;
+    result.severity = 0;
+    result.score = 0;
+    result.probability = 0;
+    result.status = 0;
+    result.ruleType = 0;
+    result.ruleId = '';
+    result.sourceIp = '';
+    result.targetIp = '';
+    result.targetLocation = (0, _1.NewGeoData)();
+    result.description = '';
+    result.tags = [];
+    result.labels = [];
+    result.category = 0;
+    result.recommendedAction = '';
+    result.occurrences = [];
+    result.trafficDirection = 0;
+    result.confidenceScore = 0;
+    result.occurrencesCount = 0;
+    result.indicators = [];
+    result.source = '';
+    result.srcPort = 0;
+    result.dstPort = 0;
+    return result;
+}
+//# sourceMappingURL=Event.js.map

package/dist/cjs/lib/model/Event.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Event.js","sourceRoot":"","sources":["../../../../src/lib/model/Event.ts"],"names":[],"mappings":";;;AAqHA,4BAqCC;AAlJD,iDAA8C;AAK9C,wBAA+B;AAE/B,eAAe;AACf,sMAAsM;AACtM,+JAA+J;AAC/J,mLAAmL;AACnL,0HAA0H;AAC1H,yKAAyK;AACzK,gMAAgM;AAChM,MAAa,KAAM,SAAQ,2BAAY;CA4FtC;AA5FD,sBA4FC;AAED,qBAAqB;AACrB,SAAgB,QAAQ;IACvB,IAAI,MAAM,GAAW,IAAI,KAAK,EAAE,CAAC;IACjC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC;IACf,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC;IACrB,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC;IACrB,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC;IAChB,MAAM,CAAC,SAAS,GAAG,EAAE,CAAC;IACtB,MAAM,CAAC,QAAQ,GAAG,EAAE,CAAC;IACrB,MAAM,CAAC,QAAQ,GAAG,EAAE,CAAC;IACrB,MAAM,CAAC,OAAO,GAAG,EAAE,CAAC;IACpB,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IAClB,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC;IACrB,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC;IACnB,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC;IAChB,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC;IACpB,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC;IACjB,MAAM,CAAC,WAAW,GAAG,CAAC,CAAC;IACvB,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IAClB,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC;IACpB,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC;IACnB,MAAM,CAAC,QAAQ,GAAG,EAAE,CAAC;IACrB,MAAM,CAAC,QAAQ,GAAG,EAAE,CAAC;IACrB,MAAM,CAAC,cAAc,GAAG,IAAA,aAAU,GAAE,CAAC;IACrC,MAAM,CAAC,WAAW,GAAG,EAAE,CAAC;IACxB,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;IACjB,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC;IACnB,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC;IACpB,MAAM,CAAC,iBAAiB,GAAG,EAAE,CAAC;IAC9B,MAAM,CAAC,WAAW,GAAG,EAAE,CAAC;IACxB,MAAM,CAAC,gBAAgB,GAAG,CAAC,CAAC;IAC5B,MAAM,CAAC,eAAe,GAAG,CAAC,CAAC;IAC3B,MAAM,CAAC,gBAAgB,GAAG,CAAC,CAAC;IAC5B,MAAM,CAAC,UAAU,GAAG,EAAE,CAAC;IACvB,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC;IACnB,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC;IACnB,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC;IACnB,OAAO,MAAM,CAAC;AACf,CAAC"}

package/dist/cjs/lib/model/EventCategoryCode.d.ts

@@ -0,0 +1,8 @@
+import { Tuple } from '.';
+export declare enum EventCategoryCode {
+    UNDEFINED = 0,
+    SECURITY = 1,
+    OPERATIONS = 2
+}
+export declare function GetEventCategoryCodes(): Tuple<EventCategoryCode, string>[];
+export declare function MapEventCategoryCodes(): Map<EventCategoryCode, string>;

package/dist/cjs/lib/model/EventCategoryCode.js

@@ -0,0 +1,32 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EventCategoryCode = void 0;
+exports.GetEventCategoryCodes = GetEventCategoryCodes;
+exports.MapEventCategoryCodes = MapEventCategoryCodes;
+const _1 = require(".");
+// EventCategoryCode represents the list of event categories: UNDEFINED | SECURITY | OPERATIONS
+var EventCategoryCode;
+(function (EventCategoryCode) {
+    // Undefined [0] 
+    EventCategoryCode[EventCategoryCode["UNDEFINED"] = 0] = "UNDEFINED";
+    // Cyber-Security event [1] 
+    EventCategoryCode[EventCategoryCode["SECURITY"] = 1] = "SECURITY";
+    // Operational event [2] 
+    EventCategoryCode[EventCategoryCode["OPERATIONS"] = 2] = "OPERATIONS";
+})(EventCategoryCode || (exports.EventCategoryCode = EventCategoryCode = {}));
+// Return list of EventCategoryCode values and their display names
+function GetEventCategoryCodes() {
+    let result = [];
+    result.push(new _1.Tuple(EventCategoryCode.SECURITY, 'EventCategoryCode.SECURITY'));
+    result.push(new _1.Tuple(EventCategoryCode.OPERATIONS, 'EventCategoryCode.OPERATIONS'));
+    return result;
+}
+// Return map of EventCategoryCode values and their display names
+function MapEventCategoryCodes() {
+    let result = new Map();
+    result.set(EventCategoryCode.UNDEFINED, 'Undefined');
+    result.set(EventCategoryCode.SECURITY, 'Security');
+    result.set(EventCategoryCode.OPERATIONS, 'Operations');
+    return result;
+}
+//# sourceMappingURL=EventCategoryCode.js.map

package/dist/cjs/lib/model/EventCategoryCode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EventCategoryCode.js","sourceRoot":"","sources":["../../../../src/lib/model/EventCategoryCode.ts"],"names":[],"mappings":";;;AAmBA,sDAOC;AAGD,sDAOC;AAnCD,wBAA0B;AAG1B,+FAA+F;AAC/F,IAAY,iBAWX;AAXD,WAAY,iBAAiB;IAEzB,iBAAiB;IACjB,mEAAa,CAAA;IAEb,4BAA4B;IAC5B,iEAAY,CAAA;IAEZ,yBAAyB;IACzB,qEAAc,CAAA;AAElB,CAAC,EAXW,iBAAiB,iCAAjB,iBAAiB,QAW5B;AAED,kEAAkE;AAClE,SAAgB,qBAAqB;IACpC,IAAI,MAAM,GAAwC,EAAE,CAAC;IAErD,MAAM,CAAC,IAAI,CAAC,IAAI,QAAK,CAA4B,iBAAiB,CAAC,QAAQ,EAAE,4BAA4B,CAAC,CAAC,CAAA;IAC3G,MAAM,CAAC,IAAI,CAAC,IAAI,QAAK,CAA4B,iBAAiB,CAAC,UAAU,EAAE,8BAA8B,CAAC,CAAC,CAAA;IAE5G,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,iEAAiE;AACjE,SAAgB,qBAAqB;IACjC,IAAI,MAAM,GAAG,IAAI,GAAG,EAA6B,CAAC;IAClD,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACxD,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACnD,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAEpD,OAAO,MAAM,CAAC;AAClB,CAAC"}

package/dist/cjs/lib/model/EventOccurrence.d.ts

@@ -0,0 +1,11 @@
+import { TrafficDirectionCode } from './TrafficDirectionCode';
+import { Indicator } from './Indicator';
+export declare class EventOccurrence {
+    timestamp: number;
+    source: string;
+    sourceIp: string;
+    indicators: Indicator[];
+    trafficDirection: TrafficDirectionCode;
+    constructor(timestamp?: number, source?: string, sourceIp?: string, indicators?: Indicator[], trafficDirection?: TrafficDirectionCode);
+}
+export declare function NewEventOccurrence(): EventOccurrence;

package/dist/cjs/lib/model/EventOccurrence.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EventOccurrence = void 0;
+exports.NewEventOccurrence = NewEventOccurrence;
+// EventOccurrence is a single instance of event generated for the same deviceId based on the same rule on the same month
+class EventOccurrence {
+    constructor(timestamp, source, sourceIp, indicators, trafficDirection) {
+        if (timestamp !== undefined) {
+            this.timestamp = timestamp;
+        }
+        if (source !== undefined) {
+            this.source = source;
+        }
+        if (sourceIp !== undefined) {
+            this.sourceIp = sourceIp;
+        }
+        if (indicators !== undefined) {
+            this.indicators = indicators;
+        }
+        if (trafficDirection !== undefined) {
+            this.trafficDirection = trafficDirection;
+        }
+    }
+}
+exports.EventOccurrence = EventOccurrence;
+// New empty instance
+function NewEventOccurrence() {
+    let result = new EventOccurrence();
+    result.timestamp = 0;
+    result.source = '';
+    result.sourceIp = '';
+    result.indicators = [];
+    result.trafficDirection = 0;
+    return result;
+}
+//# sourceMappingURL=EventOccurrence.js.map

package/dist/cjs/lib/model/EventOccurrence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EventOccurrence.js","sourceRoot":"","sources":["../../../../src/lib/model/EventOccurrence.ts"],"names":[],"mappings":";;;AAiCA,gDAQC;AArCD,yHAAyH;AACzH,MAAa,eAAe;IAiBxB,YAAY,SAAkB,EAAE,MAAe,EAAE,QAAiB,EAAE,UAAwB,EAAE,gBAAuC;QACjI,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAAC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAAC,CAAC;QAC5D,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QAAC,CAAC;QACnD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAAC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAAC,CAAC;QACzD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAAC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAAC,CAAC;QAC/D,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;YAAC,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;QAAC,CAAC;IACrF,CAAC;CAEJ;AAzBD,0CAyBC;AAED,qBAAqB;AACrB,SAAgB,kBAAkB;IACjC,IAAI,MAAM,GAAqB,IAAI,eAAe,EAAE,CAAC;IACrD,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC;IACrB,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC;IACnB,MAAM,CAAC,QAAQ,GAAG,EAAE,CAAC;IACrB,MAAM,CAAC,UAAU,GAAG,EAAE,CAAC;IACvB,MAAM,CAAC,gBAAgB,GAAG,CAAC,CAAC;IAC5B,OAAO,MAAM,CAAC;AACf,CAAC"}

package/dist/cjs/lib/model/EventSeverityConfig.d.ts

@@ -0,0 +1,6 @@
+import { SeverityIntervalTuple } from './SeverityIntervalTuple';
+export declare class EventSeverityConfig {
+    severityConfigs: SeverityIntervalTuple[];
+    constructor(severityConfigs?: SeverityIntervalTuple[]);
+}
+export declare function NewEventSeverityConfig(): EventSeverityConfig;

package/dist/cjs/lib/model/EventSeverityConfig.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EventSeverityConfig = void 0;
+exports.NewEventSeverityConfig = NewEventSeverityConfig;
+// EventSeverityConfig is a list of event severity configuration
+class EventSeverityConfig {
+    constructor(severityConfigs) {
+        if (severityConfigs !== undefined) {
+            this.severityConfigs = severityConfigs;
+        }
+    }
+}
+exports.EventSeverityConfig = EventSeverityConfig;
+// New empty instance
+function NewEventSeverityConfig() {
+    let result = new EventSeverityConfig();
+    result.severityConfigs = [];
+    return result;
+}
+//# sourceMappingURL=EventSeverityConfig.js.map

package/dist/cjs/lib/model/EventSeverityConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EventSeverityConfig.js","sourceRoot":"","sources":["../../../../src/lib/model/EventSeverityConfig.ts"],"names":[],"mappings":";;;AAgBA,wDAIC;AAjBD,gEAAgE;AAChE,MAAa,mBAAmB;IAK5B,YAAY,eAAyC;QACjD,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YAAC,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;QAAC,CAAC;IAClF,CAAC;CAEJ;AATD,kDASC;AAED,qBAAqB;AACrB,SAAgB,sBAAsB;IACrC,IAAI,MAAM,GAAyB,IAAI,mBAAmB,EAAE,CAAC;IAC7D,MAAM,CAAC,eAAe,GAAG,EAAE,CAAC;IAC5B,OAAO,MAAM,CAAC;AACf,CAAC"}

package/dist/cjs/lib/model/EventStatusCode.d.ts

@@ -0,0 +1,10 @@
+import { Tuple } from '.';
+export declare enum EventStatusCode {
+    UNDEFINED = 0,
+    NEW = 1,
+    OPEN = 2,
+    CLOSED_TRUE = 3,
+    CLOSED_FALSE = 4
+}
+export declare function GetEventStatusCodes(): Tuple<EventStatusCode, string>[];
+export declare function MapEventStatusCodes(): Map<EventStatusCode, string>;

package/dist/cjs/lib/model/EventStatusCode.js

@@ -0,0 +1,40 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EventStatusCode = void 0;
+exports.GetEventStatusCodes = GetEventStatusCodes;
+exports.MapEventStatusCodes = MapEventStatusCodes;
+const _1 = require(".");
+// EventStatusCode represents the list of event types: UNDEFINED | NEW | OPEN | CLOSED_TRUE | CLOSED_FALSE
+var EventStatusCode;
+(function (EventStatusCode) {
+    // Undefined [0] 
+    EventStatusCode[EventStatusCode["UNDEFINED"] = 0] = "UNDEFINED";
+    // New event [1] 
+    EventStatusCode[EventStatusCode["NEW"] = 1] = "NEW";
+    // Open event, handled by the operator [2] 
+    EventStatusCode[EventStatusCode["OPEN"] = 2] = "OPEN";
+    // Closed event (tagged as True event) [3] 
+    EventStatusCode[EventStatusCode["CLOSED_TRUE"] = 3] = "CLOSED_TRUE";
+    // Closed event (tagged as False event) [4] 
+    EventStatusCode[EventStatusCode["CLOSED_FALSE"] = 4] = "CLOSED_FALSE";
+})(EventStatusCode || (exports.EventStatusCode = EventStatusCode = {}));
+// Return list of EventStatusCode values and their display names
+function GetEventStatusCodes() {
+    let result = [];
+    result.push(new _1.Tuple(EventStatusCode.NEW, 'EventStatusCode.NEW'));
+    result.push(new _1.Tuple(EventStatusCode.OPEN, 'EventStatusCode.OPEN'));
+    result.push(new _1.Tuple(EventStatusCode.CLOSED_TRUE, 'EventStatusCode.CLOSED_TRUE'));
+    result.push(new _1.Tuple(EventStatusCode.CLOSED_FALSE, 'EventStatusCode.CLOSED_FALSE'));
+    return result;
+}
+// Return map of EventStatusCode values and their display names
+function MapEventStatusCodes() {
+    let result = new Map();
+    result.set(EventStatusCode.UNDEFINED, 'Undefined');
+    result.set(EventStatusCode.NEW, 'New');
+    result.set(EventStatusCode.OPEN, 'Open');
+    result.set(EventStatusCode.CLOSED_TRUE, 'Closed True');
+    result.set(EventStatusCode.CLOSED_FALSE, 'Closed False');
+    return result;
+}
+//# sourceMappingURL=EventStatusCode.js.map

package/dist/cjs/lib/model/EventStatusCode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EventStatusCode.js","sourceRoot":"","sources":["../../../../src/lib/model/EventStatusCode.ts"],"names":[],"mappings":";;;AAyBA,kDASC;AAGD,kDASC;AA7CD,wBAA0B;AAG1B,0GAA0G;AAC1G,IAAY,eAiBX;AAjBD,WAAY,eAAe;IAEvB,iBAAiB;IACjB,+DAAa,CAAA;IAEb,iBAAiB;IACjB,mDAAO,CAAA;IAEP,2CAA2C;IAC3C,qDAAQ,CAAA;IAER,2CAA2C;IAC3C,mEAAe,CAAA;IAEf,4CAA4C;IAC5C,qEAAgB,CAAA;AAEpB,CAAC,EAjBW,eAAe,+BAAf,eAAe,QAiB1B;AAED,gEAAgE;AAChE,SAAgB,mBAAmB;IAClC,IAAI,MAAM,GAAsC,EAAE,CAAC;IAEnD,MAAM,CAAC,IAAI,CAAC,IAAI,QAAK,CAA0B,eAAe,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC,CAAA;IAC3F,MAAM,CAAC,IAAI,CAAC,IAAI,QAAK,CAA0B,eAAe,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC,CAAA;IAC7F,MAAM,CAAC,IAAI,CAAC,IAAI,QAAK,CAA0B,eAAe,CAAC,WAAW,EAAE,6BAA6B,CAAC,CAAC,CAAA;IAC3G,MAAM,CAAC,IAAI,CAAC,IAAI,QAAK,CAA0B,eAAe,CAAC,YAAY,EAAE,8BAA8B,CAAC,CAAC,CAAA;IAE1G,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,+DAA+D;AAC/D,SAAgB,mBAAmB;IAC/B,IAAI,MAAM,GAAG,IAAI,GAAG,EAA2B,CAAC;IAChD,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACtD,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACvC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACvD,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAEtD,OAAO,MAAM,CAAC;AAClB,CAAC"}

package/dist/cjs/lib/model/EventTypeCode.d.ts

@@ -0,0 +1,45 @@
+import { Tuple } from '.';
+export declare enum EventTypeCode {
+    UNDEFINED = 0,
+    OTHER = 1,
+    DEVICE_TAKEOVER = 2,
+    DDOS = 3,
+    UNKNOWN_MALWARE = 4,
+    MAN_IN_THE_MIDDLE = 5,
+    DATA_THEFT = 6,
+    PORT_SCANNING = 7,
+    ABNORMAL_DOWNLOAD = 8,
+    ABNORMAL_INCOMING_CONNECTION = 9,
+    UNSUCCESSFUL_CONNECTION_ATTEMPTS = 10,
+    HIGH_VOLUME_TRANSIT = 11,
+    DEVICE_LEVEL_ATTACK = 12,
+    REPLAY_ATTACK = 13,
+    DEVICE_TAKEOVER_ATTEMPT = 14,
+    UNKNOWN_OPERATION = 15,
+    CRYPTO_MINING = 16,
+    SUSPICIOUS_IP = 17,
+    ABNORMAL_OUTBOUND_PORTS = 18,
+    ABNORMAL_OUTBOUND_ENDPOINTS = 19,
+    SIM_SWITCH = 20,
+    SIM_MISUSAGE = 21,
+    DEVICE_DISCONNECTION = 22,
+    ANOMALY_DETECTED = 23,
+    CASE_MUTATED_DNS_QUERY = 24,
+    DGA_DNS_QUERY = 25,
+    CASE_EMPTY_STRING = 26,
+    SUSPICIOUS_IP_OUT = 27,
+    IP_LOOKUP_DNS_REQUEST = 28,
+    EXCESSIVE_NONSTD_DNS_ATTEMPTS = 29,
+    IOT_MALWARE_PORT_CONN = 30,
+    IOT_OUTBOUND_WIN_WORM_PORT = 31,
+    IOT_OUTBOUND_EMAIL_SPAM_PORT = 32,
+    IOT_OUTBOUND_NOTORIOUS_PORT = 33,
+    IOT_OUTBOUND_LONG_CONN_ALT_SSH = 34,
+    IOT_OUTBOUND_FAST_CONNECT_BURST = 35,
+    IOT_LOCAL_FAST_CONNECT_BURST = 36,
+    IOT_HIGH_RISK_TLD_QUERY = 37,
+    IOT_DNS_TXT_PUBLIC_RESOLVER = 38,
+    IOT_FTP_PLAINTEXT_CREDS = 39
+}
+export declare function GetEventTypeCodes(): Tuple<EventTypeCode, string>[];
+export declare function MapEventTypeCodes(): Map<EventTypeCode, string>;

package/dist/cjs/lib/model/EventTypeCode.js

@@ -0,0 +1,180 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EventTypeCode = void 0;
+exports.GetEventTypeCodes = GetEventTypeCodes;
+exports.MapEventTypeCodes = MapEventTypeCodes;
+const _1 = require(".");
+// EventTypeCode represents the list of event types: UNDEFINED | OTHER | DEVICE_TAKEOVER
+var EventTypeCode;
+(function (EventTypeCode) {
+    // Undefined [0] 
+    EventTypeCode[EventTypeCode["UNDEFINED"] = 0] = "UNDEFINED";
+    // Other (Unknown Event) [1] 
+    EventTypeCode[EventTypeCode["OTHER"] = 1] = "OTHER";
+    // Device Takeover [2] 
+    EventTypeCode[EventTypeCode["DEVICE_TAKEOVER"] = 2] = "DEVICE_TAKEOVER";
+    // DDoS [3] 
+    EventTypeCode[EventTypeCode["DDOS"] = 3] = "DDOS";
+    // Unknown Malware [4] 
+    EventTypeCode[EventTypeCode["UNKNOWN_MALWARE"] = 4] = "UNKNOWN_MALWARE";
+    // Man-in-the-Middle [5] 
+    EventTypeCode[EventTypeCode["MAN_IN_THE_MIDDLE"] = 5] = "MAN_IN_THE_MIDDLE";
+    // Data Theft [6] 
+    EventTypeCode[EventTypeCode["DATA_THEFT"] = 6] = "DATA_THEFT";
+    // Port Scanning [7] 
+    EventTypeCode[EventTypeCode["PORT_SCANNING"] = 7] = "PORT_SCANNING";
+    // Abnormal Download [8] 
+    EventTypeCode[EventTypeCode["ABNORMAL_DOWNLOAD"] = 8] = "ABNORMAL_DOWNLOAD";
+    // Abnormal Incoming Connection [9] 
+    EventTypeCode[EventTypeCode["ABNORMAL_INCOMING_CONNECTION"] = 9] = "ABNORMAL_INCOMING_CONNECTION";
+    // Unsuccessful Connection Attempts [10] 
+    EventTypeCode[EventTypeCode["UNSUCCESSFUL_CONNECTION_ATTEMPTS"] = 10] = "UNSUCCESSFUL_CONNECTION_ATTEMPTS";
+    // High Volume Transmit [11] 
+    EventTypeCode[EventTypeCode["HIGH_VOLUME_TRANSIT"] = 11] = "HIGH_VOLUME_TRANSIT";
+    // Device Level Attack [12] 
+    EventTypeCode[EventTypeCode["DEVICE_LEVEL_ATTACK"] = 12] = "DEVICE_LEVEL_ATTACK";
+    // Replay Attack [13] 
+    EventTypeCode[EventTypeCode["REPLAY_ATTACK"] = 13] = "REPLAY_ATTACK";
+    // Attempted Device Takeover [14] 
+    EventTypeCode[EventTypeCode["DEVICE_TAKEOVER_ATTEMPT"] = 14] = "DEVICE_TAKEOVER_ATTEMPT";
+    // Unknown Operation' [15] 
+    EventTypeCode[EventTypeCode["UNKNOWN_OPERATION"] = 15] = "UNKNOWN_OPERATION";
+    // Crypto Mining [16] 
+    EventTypeCode[EventTypeCode["CRYPTO_MINING"] = 16] = "CRYPTO_MINING";
+    // Suspicious IP [17] 
+    EventTypeCode[EventTypeCode["SUSPICIOUS_IP"] = 17] = "SUSPICIOUS_IP";
+    // Abnormal number of outbound ports [18] 
+    EventTypeCode[EventTypeCode["ABNORMAL_OUTBOUND_PORTS"] = 18] = "ABNORMAL_OUTBOUND_PORTS";
+    // Abnormal number of outbound endpoints (destinations) [19] 
+    EventTypeCode[EventTypeCode["ABNORMAL_OUTBOUND_ENDPOINTS"] = 19] = "ABNORMAL_OUTBOUND_ENDPOINTS";
+    // Sim Switch [20] 
+    EventTypeCode[EventTypeCode["SIM_SWITCH"] = 20] = "SIM_SWITCH";
+    // SIM misusage [21] 
+    EventTypeCode[EventTypeCode["SIM_MISUSAGE"] = 21] = "SIM_MISUSAGE";
+    // Device disconnect [22] 
+    EventTypeCode[EventTypeCode["DEVICE_DISCONNECTION"] = 22] = "DEVICE_DISCONNECTION";
+    // Anomaly detected [23] 
+    EventTypeCode[EventTypeCode["ANOMALY_DETECTED"] = 23] = "ANOMALY_DETECTED";
+    // CASE-MUTATED DNS Query [24] 
+    EventTypeCode[EventTypeCode["CASE_MUTATED_DNS_QUERY"] = 24] = "CASE_MUTATED_DNS_QUERY";
+    // DGA DNS Query [25] 
+    EventTypeCode[EventTypeCode["DGA_DNS_QUERY"] = 25] = "DGA_DNS_QUERY";
+    // CASE_EMPTY_STRING [26] 
+    EventTypeCode[EventTypeCode["CASE_EMPTY_STRING"] = 26] = "CASE_EMPTY_STRING";
+    // Suspicious IP OUT [27] 
+    EventTypeCode[EventTypeCode["SUSPICIOUS_IP_OUT"] = 27] = "SUSPICIOUS_IP_OUT";
+    // DNS request for known IP/MAC lookup service  [28] 
+    EventTypeCode[EventTypeCode["IP_LOOKUP_DNS_REQUEST"] = 28] = "IP_LOOKUP_DNS_REQUEST";
+    // Excessive conn attempts non-standard DNS port [29] 
+    EventTypeCode[EventTypeCode["EXCESSIVE_NONSTD_DNS_ATTEMPTS"] = 29] = "EXCESSIVE_NONSTD_DNS_ATTEMPTS";
+    // Conn attempt to non-trusted endpoint over exploited port [30] 
+    EventTypeCode[EventTypeCode["IOT_MALWARE_PORT_CONN"] = 30] = "IOT_MALWARE_PORT_CONN";
+    // IoT outbound connection to Windows worm/exploit port [31] 
+    EventTypeCode[EventTypeCode["IOT_OUTBOUND_WIN_WORM_PORT"] = 31] = "IOT_OUTBOUND_WIN_WORM_PORT";
+    // IoT outbound connection to email/spam-related port [32] 
+    EventTypeCode[EventTypeCode["IOT_OUTBOUND_EMAIL_SPAM_PORT"] = 32] = "IOT_OUTBOUND_EMAIL_SPAM_PORT";
+    // IoT outbound connection to notorious/misused service port [33] 
+    EventTypeCode[EventTypeCode["IOT_OUTBOUND_NOTORIOUS_PORT"] = 33] = "IOT_OUTBOUND_NOTORIOUS_PORT";
+    // IoT outbound long-lived conn to alt-SSH [34] 
+    EventTypeCode[EventTypeCode["IOT_OUTBOUND_LONG_CONN_ALT_SSH"] = 34] = "IOT_OUTBOUND_LONG_CONN_ALT_SSH";
+    // Fast connect/disconnect burst (no data) from local endpoint [35] 
+    EventTypeCode[EventTypeCode["IOT_OUTBOUND_FAST_CONNECT_BURST"] = 35] = "IOT_OUTBOUND_FAST_CONNECT_BURST";
+    // Fast connect/disconnect burst (no data) between local endpoints [36] 
+    EventTypeCode[EventTypeCode["IOT_LOCAL_FAST_CONNECT_BURST"] = 36] = "IOT_LOCAL_FAST_CONNECT_BURST";
+    // DNS query to high-risk TLD [37] 
+    EventTypeCode[EventTypeCode["IOT_HIGH_RISK_TLD_QUERY"] = 37] = "IOT_HIGH_RISK_TLD_QUERY";
+    // DNS query of type TXT from IoT device to public resolver [38] 
+    EventTypeCode[EventTypeCode["IOT_DNS_TXT_PUBLIC_RESOLVER"] = 38] = "IOT_DNS_TXT_PUBLIC_RESOLVER";
+    // FTP credentials sent in cleartext (USER/PASS over TCP/21) [39] 
+    EventTypeCode[EventTypeCode["IOT_FTP_PLAINTEXT_CREDS"] = 39] = "IOT_FTP_PLAINTEXT_CREDS";
+})(EventTypeCode || (exports.EventTypeCode = EventTypeCode = {}));
+// Return list of EventTypeCode values and their display names
+function GetEventTypeCodes() {
+    let result = [];
+    result.push(new _1.Tuple(EventTypeCode.OTHER, 'EventTypeCode.OTHER'));
+    result.push(new _1.Tuple(EventTypeCode.DEVICE_TAKEOVER, 'EventTypeCode.DEVICE_TAKEOVER'));
+    result.push(new _1.Tuple(EventTypeCode.DDOS, 'EventTypeCode.DDOS'));
+    result.push(new _1.Tuple(EventTypeCode.UNKNOWN_MALWARE, 'EventTypeCode.UNKNOWN_MALWARE'));
+    result.push(new _1.Tuple(EventTypeCode.MAN_IN_THE_MIDDLE, 'EventTypeCode.MAN_IN_THE_MIDDLE'));
+    result.push(new _1.Tuple(EventTypeCode.DATA_THEFT, 'EventTypeCode.DATA_THEFT'));
+    result.push(new _1.Tuple(EventTypeCode.PORT_SCANNING, 'EventTypeCode.PORT_SCANNING'));
+    result.push(new _1.Tuple(EventTypeCode.ABNORMAL_DOWNLOAD, 'EventTypeCode.ABNORMAL_DOWNLOAD'));
+    result.push(new _1.Tuple(EventTypeCode.ABNORMAL_INCOMING_CONNECTION, 'EventTypeCode.ABNORMAL_INCOMING_CONNECTION'));
+    result.push(new _1.Tuple(EventTypeCode.UNSUCCESSFUL_CONNECTION_ATTEMPTS, 'EventTypeCode.UNSUCCESSFUL_CONNECTION_ATTEMPTS'));
+    result.push(new _1.Tuple(EventTypeCode.HIGH_VOLUME_TRANSIT, 'EventTypeCode.HIGH_VOLUME_TRANSIT'));
+    result.push(new _1.Tuple(EventTypeCode.DEVICE_LEVEL_ATTACK, 'EventTypeCode.DEVICE_LEVEL_ATTACK'));
+    result.push(new _1.Tuple(EventTypeCode.REPLAY_ATTACK, 'EventTypeCode.REPLAY_ATTACK'));
+    result.push(new _1.Tuple(EventTypeCode.DEVICE_TAKEOVER_ATTEMPT, 'EventTypeCode.DEVICE_TAKEOVER_ATTEMPT'));
+    result.push(new _1.Tuple(EventTypeCode.UNKNOWN_OPERATION, 'EventTypeCode.UNKNOWN_OPERATION'));
+    result.push(new _1.Tuple(EventTypeCode.CRYPTO_MINING, 'EventTypeCode.CRYPTO_MINING'));
+    result.push(new _1.Tuple(EventTypeCode.SUSPICIOUS_IP, 'EventTypeCode.SUSPICIOUS_IP'));
+    result.push(new _1.Tuple(EventTypeCode.ABNORMAL_OUTBOUND_PORTS, 'EventTypeCode.ABNORMAL_OUTBOUND_PORTS'));
+    result.push(new _1.Tuple(EventTypeCode.ABNORMAL_OUTBOUND_ENDPOINTS, 'EventTypeCode.ABNORMAL_OUTBOUND_ENDPOINTS'));
+    result.push(new _1.Tuple(EventTypeCode.SIM_SWITCH, 'EventTypeCode.SIM_SWITCH'));
+    result.push(new _1.Tuple(EventTypeCode.SIM_MISUSAGE, 'EventTypeCode.SIM_MISUSAGE'));
+    result.push(new _1.Tuple(EventTypeCode.DEVICE_DISCONNECTION, 'EventTypeCode.DEVICE_DISCONNECTION'));
+    result.push(new _1.Tuple(EventTypeCode.ANOMALY_DETECTED, 'EventTypeCode.ANOMALY_DETECTED'));
+    result.push(new _1.Tuple(EventTypeCode.CASE_MUTATED_DNS_QUERY, 'EventTypeCode.CASE_MUTATED_DNS_QUERY'));
+    result.push(new _1.Tuple(EventTypeCode.DGA_DNS_QUERY, 'EventTypeCode.DGA_DNS_QUERY'));
+    result.push(new _1.Tuple(EventTypeCode.CASE_EMPTY_STRING, 'EventTypeCode.CASE_EMPTY_STRING'));
+    result.push(new _1.Tuple(EventTypeCode.SUSPICIOUS_IP_OUT, 'EventTypeCode.SUSPICIOUS_IP_OUT'));
+    result.push(new _1.Tuple(EventTypeCode.IP_LOOKUP_DNS_REQUEST, 'EventTypeCode.IP_LOOKUP_DNS_REQUEST'));
+    result.push(new _1.Tuple(EventTypeCode.EXCESSIVE_NONSTD_DNS_ATTEMPTS, 'EventTypeCode.EXCESSIVE_NONSTD_DNS_ATTEMPTS'));
+    result.push(new _1.Tuple(EventTypeCode.IOT_MALWARE_PORT_CONN, 'EventTypeCode.IOT_MALWARE_PORT_CONN'));
+    result.push(new _1.Tuple(EventTypeCode.IOT_OUTBOUND_WIN_WORM_PORT, 'EventTypeCode.IOT_OUTBOUND_WIN_WORM_PORT'));
+    result.push(new _1.Tuple(EventTypeCode.IOT_OUTBOUND_EMAIL_SPAM_PORT, 'EventTypeCode.IOT_OUTBOUND_EMAIL_SPAM_PORT'));
+    result.push(new _1.Tuple(EventTypeCode.IOT_OUTBOUND_NOTORIOUS_PORT, 'EventTypeCode.IOT_OUTBOUND_NOTORIOUS_PORT'));
+    result.push(new _1.Tuple(EventTypeCode.IOT_OUTBOUND_LONG_CONN_ALT_SSH, 'EventTypeCode.IOT_OUTBOUND_LONG_CONN_ALT_SSH'));
+    result.push(new _1.Tuple(EventTypeCode.IOT_OUTBOUND_FAST_CONNECT_BURST, 'EventTypeCode.IOT_OUTBOUND_FAST_CONNECT_BURST'));
+    result.push(new _1.Tuple(EventTypeCode.IOT_LOCAL_FAST_CONNECT_BURST, 'EventTypeCode.IOT_LOCAL_FAST_CONNECT_BURST'));
+    result.push(new _1.Tuple(EventTypeCode.IOT_HIGH_RISK_TLD_QUERY, 'EventTypeCode.IOT_HIGH_RISK_TLD_QUERY'));
+    result.push(new _1.Tuple(EventTypeCode.IOT_DNS_TXT_PUBLIC_RESOLVER, 'EventTypeCode.IOT_DNS_TXT_PUBLIC_RESOLVER'));
+    result.push(new _1.Tuple(EventTypeCode.IOT_FTP_PLAINTEXT_CREDS, 'EventTypeCode.IOT_FTP_PLAINTEXT_CREDS'));
+    return result;
+}
+// Return map of EventTypeCode values and their display names
+function MapEventTypeCodes() {
+    let result = new Map();
+    result.set(EventTypeCode.UNDEFINED, 'Undefined');
+    result.set(EventTypeCode.OTHER, 'Other');
+    result.set(EventTypeCode.DEVICE_TAKEOVER, 'Device Takeover');
+    result.set(EventTypeCode.DDOS, 'Ddos');
+    result.set(EventTypeCode.UNKNOWN_MALWARE, 'Unknown Malware');
+    result.set(EventTypeCode.MAN_IN_THE_MIDDLE, 'Man In The Middle');
+    result.set(EventTypeCode.DATA_THEFT, 'Data Theft');
+    result.set(EventTypeCode.PORT_SCANNING, 'Port Scanning');
+    result.set(EventTypeCode.ABNORMAL_DOWNLOAD, 'Abnormal Download');
+    result.set(EventTypeCode.ABNORMAL_INCOMING_CONNECTION, 'Abnormal Incoming Connection');
+    result.set(EventTypeCode.UNSUCCESSFUL_CONNECTION_ATTEMPTS, 'Unsuccessful Connection Attempts');
+    result.set(EventTypeCode.HIGH_VOLUME_TRANSIT, 'High Volume Transit');
+    result.set(EventTypeCode.DEVICE_LEVEL_ATTACK, 'Device Level Attack');
+    result.set(EventTypeCode.REPLAY_ATTACK, 'Replay Attack');
+    result.set(EventTypeCode.DEVICE_TAKEOVER_ATTEMPT, 'Device Takeover Attempt');
+    result.set(EventTypeCode.UNKNOWN_OPERATION, 'Unknown Operation');
+    result.set(EventTypeCode.CRYPTO_MINING, 'Crypto Mining');
+    result.set(EventTypeCode.SUSPICIOUS_IP, 'Suspicious Ip');
+    result.set(EventTypeCode.ABNORMAL_OUTBOUND_PORTS, 'Abnormal Outbound Ports');
+    result.set(EventTypeCode.ABNORMAL_OUTBOUND_ENDPOINTS, 'Abnormal Outbound Endpoints');
+    result.set(EventTypeCode.SIM_SWITCH, 'Sim Switch');
+    result.set(EventTypeCode.SIM_MISUSAGE, 'Sim Misusage');
+    result.set(EventTypeCode.DEVICE_DISCONNECTION, 'Device Disconnection');
+    result.set(EventTypeCode.ANOMALY_DETECTED, 'Anomaly Detected');
+    result.set(EventTypeCode.CASE_MUTATED_DNS_QUERY, 'Case Mutated Dns Query');
+    result.set(EventTypeCode.DGA_DNS_QUERY, 'Dga Dns Query');
+    result.set(EventTypeCode.CASE_EMPTY_STRING, 'Case Empty String');
+    result.set(EventTypeCode.SUSPICIOUS_IP_OUT, 'Suspicious Ip Out');
+    result.set(EventTypeCode.IP_LOOKUP_DNS_REQUEST, 'Ip Lookup Dns Request');
+    result.set(EventTypeCode.EXCESSIVE_NONSTD_DNS_ATTEMPTS, 'Excessive Nonstd Dns Attempts');
+    result.set(EventTypeCode.IOT_MALWARE_PORT_CONN, 'Iot Malware Port Conn');
+    result.set(EventTypeCode.IOT_OUTBOUND_WIN_WORM_PORT, 'Iot Outbound Win Worm Port');
+    result.set(EventTypeCode.IOT_OUTBOUND_EMAIL_SPAM_PORT, 'Iot Outbound Email Spam Port');
+    result.set(EventTypeCode.IOT_OUTBOUND_NOTORIOUS_PORT, 'Iot Outbound Notorious Port');
+    result.set(EventTypeCode.IOT_OUTBOUND_LONG_CONN_ALT_SSH, 'Iot Outbound Long Conn Alt Ssh');
+    result.set(EventTypeCode.IOT_OUTBOUND_FAST_CONNECT_BURST, 'Iot Outbound Fast Connect Burst');
+    result.set(EventTypeCode.IOT_LOCAL_FAST_CONNECT_BURST, 'Iot Local Fast Connect Burst');
+    result.set(EventTypeCode.IOT_HIGH_RISK_TLD_QUERY, 'Iot High Risk Tld Query');
+    result.set(EventTypeCode.IOT_DNS_TXT_PUBLIC_RESOLVER, 'Iot Dns Txt Public Resolver');
+    result.set(EventTypeCode.IOT_FTP_PLAINTEXT_CREDS, 'Iot Ftp Plaintext Creds');
+    return result;
+}
+//# sourceMappingURL=EventTypeCode.js.map

package/dist/cjs/lib/model/EventTypeCode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EventTypeCode.js","sourceRoot":"","sources":["../../../../src/lib/model/EventTypeCode.ts"],"names":[],"mappings":";;;AAkIA,8CA4CC;AAGD,8CA4CC;AA5ND,wBAA0B;AAG1B,wFAAwF;AACxF,IAAY,aA0HX;AA1HD,WAAY,aAAa;IAErB,iBAAiB;IACjB,2DAAa,CAAA;IAEb,6BAA6B;IAC7B,mDAAS,CAAA;IAET,uBAAuB;IACvB,uEAAmB,CAAA;IAEnB,YAAY;IACZ,iDAAQ,CAAA;IAER,uBAAuB;IACvB,uEAAmB,CAAA;IAEnB,yBAAyB;IACzB,2EAAqB,CAAA;IAErB,kBAAkB;IAClB,6DAAc,CAAA;IAEd,qBAAqB;IACrB,mEAAiB,CAAA;IAEjB,yBAAyB;IACzB,2EAAqB,CAAA;IAErB,oCAAoC;IACpC,iGAAgC,CAAA;IAEhC,yCAAyC;IACzC,0GAAqC,CAAA;IAErC,6BAA6B;IAC7B,gFAAwB,CAAA;IAExB,4BAA4B;IAC5B,gFAAwB,CAAA;IAExB,sBAAsB;IACtB,oEAAkB,CAAA;IAElB,kCAAkC;IAClC,wFAA4B,CAAA;IAE5B,2BAA2B;IAC3B,4EAAsB,CAAA;IAEtB,sBAAsB;IACtB,oEAAkB,CAAA;IAElB,sBAAsB;IACtB,oEAAkB,CAAA;IAElB,0CAA0C;IAC1C,wFAA4B,CAAA;IAE5B,6DAA6D;IAC7D,gGAAgC,CAAA;IAEhC,mBAAmB;IACnB,8DAAe,CAAA;IAEf,qBAAqB;IACrB,kEAAiB,CAAA;IAEjB,0BAA0B;IAC1B,kFAAyB,CAAA;IAEzB,yBAAyB;IACzB,0EAAqB,CAAA;IAErB,+BAA+B;IAC/B,sFAA2B,CAAA;IAE3B,sBAAsB;IACtB,oEAAkB,CAAA;IAElB,0BAA0B;IAC1B,4EAAsB,CAAA;IAEtB,0BAA0B;IAC1B,4EAAsB,CAAA;IAEtB,qDAAqD;IACrD,oFAA0B,CAAA;IAE1B,sDAAsD;IACtD,oGAAkC,CAAA;IAElC,iEAAiE;IACjE,oFAA0B,CAAA;IAE1B,6DAA6D;IAC7D,8FAA+B,CAAA;IAE/B,2DAA2D;IAC3D,kGAAiC,CAAA;IAEjC,kEAAkE;IAClE,gGAAgC,CAAA;IAEhC,gDAAgD;IAChD,sGAAmC,CAAA;IAEnC,oEAAoE;IACpE,wGAAoC,CAAA;IAEpC,wEAAwE;IACxE,kGAAiC,CAAA;IAEjC,mCAAmC;IACnC,wFAA4B,CAAA;IAE5B,iEAAiE;IACjE,gGAAgC,CAAA;IAEhC,kEAAkE;IAClE,wFAA4B,CAAA;AAEhC,CAAC,EA1HW,aAAa,6BAAb,aAAa,QA0HxB;AAED,8DAA8D;AAC9D,SAAgB,iBAAiB;IAChC,IAAI,MAAM,GAAoC,EAAE,CAAC;IAEjD,MAAM,CAAC,IAAI,CAAC,IAAI,QAAK,CAAwB,aAAa,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC,CAAA;IACzF,MAAM,CAAC,IAAI,CAAC,IAAI,QAAK,CAAwB,aAAa,CAAC,eAAe,EAAE,+BAA+B,CAAC,CAAC,CAAA;IAC7G,MAAM,CAAC,IAAI,CAAC,IAAI,QAAK,CAAwB,aAAa,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC,CAAA;IACvF,MAAM,CAAC,IAAI,CAAC,IAAI,QAAK,CAAwB,aAAa,CAAC,eAAe,EAAE,+BAA+B,CAAC,CAAC,CAAA;IAC7G,MAAM,CAAC,IAAI,CAAC,IAAI,QAAK,CAAwB,aAAa,CAAC,iBAAiB,EAAE,iCAAiC,CAAC,CAAC,CAAA;IACjH,MAAM,CAAC,IAAI,CAAC,IAAI,QAAK,CAAwB,aAAa,CAAC,UAAU,EAAE,0BAA0B,CAAC,CAAC,CAAA;IACnG,MAAM,CAAC,IAAI,CAAC,IAAI,QAAK,CAAwB,aAAa,CAAC,aAAa,EAAE,6BAA6B,CAAC,CAAC,CAAA;IACzG,MAAM,CAAC,IAAI,CAAC,IAAI,QAAK,CAAwB,aAAa,CAAC,iBAAiB,EAAE,iCAAiC,CAAC,CAAC,CAAA;IACjH,MAAM,CAAC,IAAI,CAAC,IAAI,QAAK,CAAwB,aAAa,CAAC,4BAA4B,EAAE,4CAA4C,CAAC,CAAC,CAAA;IACvI,MAAM,CAAC,IAAI,CAAC,IAAI,QAAK,CAAwB,aAAa,CAAC,gCAAgC,EAAE,gDAAgD,CAAC,CAAC,CAAA;IAC/I,MAAM,CAAC,IAAI,CAAC,IAAI,QAAK,CAAwB,aAAa,CAAC,mBAAmB,EAAE,mCAAmC,CAAC,CAAC,CAAA;IACrH,MAAM,CAAC,IAAI,CAAC,IAAI,QAAK,CAAwB,aAAa,CAAC,mBAAmB,EAAE,mCAAmC,CAAC,CAAC,CAAA;IACrH,MAAM,CAAC,IAAI,CAAC,IAAI,QAAK,CAAwB,aAAa,CAAC,aAAa,EAAE,6BAA6B,CAAC,CAAC,CAAA;IACzG,MAAM,CAAC,IAAI,CAAC,IAAI,QAAK,CAAwB,aAAa,CAAC,uBAAuB,EAAE,uCAAuC,CAAC,CAAC,CAAA;IAC7H,MAAM,CAAC,IAAI,CAAC,IAAI,QAAK,CAAwB,aAAa,CAAC,iBAAiB,EAAE,iCAAiC,CAAC,CAAC,CAAA;IACjH,MAAM,CAAC,IAAI,CAAC,IAAI,QAAK,CAAwB,aAAa,CAAC,aAAa,EAAE,6BAA6B,CAAC,CAAC,CAAA;IACzG,MAAM,CAAC,IAAI,CAAC,IAAI,QAAK,CAAwB,aAAa,CAAC,aAAa,EAAE,6BAA6B,CAAC,CAAC,CAAA;IACzG,MAAM,CAAC,IAAI,CAAC,IAAI,QAAK,CAAwB,aAAa,CAAC,uBAAuB,EAAE,uCAAuC,CAAC,CAAC,CAAA;IAC7H,MAAM,CAAC,IAAI,CAAC,IAAI,QAAK,CAAwB,aAAa,CAAC,2BAA2B,EAAE,2CAA2C,CAAC,CAAC,CAAA;IACrI,MAAM,CAAC,IAAI,CAAC,IAAI,QAAK,CAAwB,aAAa,CAAC,UAAU,EAAE,0BAA0B,CAAC,CAAC,CAAA;IACnG,MAAM,CAAC,IAAI,CAAC,IAAI,QAAK,CAAwB,aAAa,CAAC,YAAY,EAAE,4BAA4B,CAAC,CAAC,CAAA;IACvG,MAAM,CAAC,IAAI,CAAC,IAAI,QAAK,CAAwB,aAAa,CAAC,oBAAoB,EAAE,oCAAoC,CAAC,CAAC,CAAA;IACvH,MAAM,CAAC,IAAI,CAAC,IAAI,QAAK,CAAwB,aAAa,CAAC,gBAAgB,EAAE,gCAAgC,CAAC,CAAC,CAAA;IAC/G,MAAM,CAAC,IAAI,CAAC,IAAI,QAAK,CAAwB,aAAa,CAAC,sBAAsB,EAAE,sCAAsC,CAAC,CAAC,CAAA;IAC3H,MAAM,CAAC,IAAI,CAAC,IAAI,QAAK,CAAwB,aAAa,CAAC,aAAa,EAAE,6BAA6B,CAAC,CAAC,CAAA;IACzG,MAAM,CAAC,IAAI,CAAC,IAAI,QAAK,CAAwB,aAAa,CAAC,iBAAiB,EAAE,iCAAiC,CAAC,CAAC,CAAA;IACjH,MAAM,CAAC,IAAI,CAAC,IAAI,QAAK,CAAwB,aAAa,CAAC,iBAAiB,EAAE,iCAAiC,CAAC,CAAC,CAAA;IACjH,MAAM,CAAC,IAAI,CAAC,IAAI,QAAK,CAAwB,aAAa,CAAC,qBAAqB,EAAE,qCAAqC,CAAC,CAAC,CAAA;IACzH,MAAM,CAAC,IAAI,CAAC,IAAI,QAAK,CAAwB,aAAa,CAAC,6BAA6B,EAAE,6CAA6C,CAAC,CAAC,CAAA;IACzI,MAAM,CAAC,IAAI,CAAC,IAAI,QAAK,CAAwB,aAAa,CAAC,qBAAqB,EAAE,qCAAqC,CAAC,CAAC,CAAA;IACzH,MAAM,CAAC,IAAI,CAAC,IAAI,QAAK,CAAwB,aAAa,CAAC,0BAA0B,EAAE,0CAA0C,CAAC,CAAC,CAAA;IACnI,MAAM,CAAC,IAAI,CAAC,IAAI,QAAK,CAAwB,aAAa,CAAC,4BAA4B,EAAE,4CAA4C,CAAC,CAAC,CAAA;IACvI,MAAM,CAAC,IAAI,CAAC,IAAI,QAAK,CAAwB,aAAa,CAAC,2BAA2B,EAAE,2CAA2C,CAAC,CAAC,CAAA;IACrI,MAAM,CAAC,IAAI,CAAC,IAAI,QAAK,CAAwB,aAAa,CAAC,8BAA8B,EAAE,8CAA8C,CAAC,CAAC,CAAA;IAC3I,MAAM,CAAC,IAAI,CAAC,IAAI,QAAK,CAAwB,aAAa,CAAC,+BAA+B,EAAE,+CAA+C,CAAC,CAAC,CAAA;IAC7I,MAAM,CAAC,IAAI,CAAC,IAAI,QAAK,CAAwB,aAAa,CAAC,4BAA4B,EAAE,4CAA4C,CAAC,CAAC,CAAA;IACvI,MAAM,CAAC,IAAI,CAAC,IAAI,QAAK,CAAwB,aAAa,CAAC,uBAAuB,EAAE,uCAAuC,CAAC,CAAC,CAAA;IAC7H,MAAM,CAAC,IAAI,CAAC,IAAI,QAAK,CAAwB,aAAa,CAAC,2BAA2B,EAAE,2CAA2C,CAAC,CAAC,CAAA;IACrI,MAAM,CAAC,IAAI,CAAC,IAAI,QAAK,CAAwB,aAAa,CAAC,uBAAuB,EAAE,uCAAuC,CAAC,CAAC,CAAA;IAE1H,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,6DAA6D;AAC7D,SAAgB,iBAAiB;IAC7B,IAAI,MAAM,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC9C,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACpD,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACzC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;IAC7D,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACvC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;IAC7D,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;IACjE,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IACnD,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IACzD,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;IACjE,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,4BAA4B,EAAE,8BAA8B,CAAC,CAAC;IACvF,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,gCAAgC,EAAE,kCAAkC,CAAC,CAAC;IAC/F,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC;IACrE,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC;IACrE,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IACzD,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,uBAAuB,EAAE,yBAAyB,CAAC,CAAC;IAC7E,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;IACjE,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IACzD,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IACzD,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,uBAAuB,EAAE,yBAAyB,CAAC,CAAC;IAC7E,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,2BAA2B,EAAE,6BAA6B,CAAC,CAAC;IACrF,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IACnD,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IACvD,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,oBAAoB,EAAE,sBAAsB,CAAC,CAAC;IACvE,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;IAC/D,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,sBAAsB,EAAE,wBAAwB,CAAC,CAAC;IAC3E,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IACzD,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;IACjE,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;IACjE,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,qBAAqB,EAAE,uBAAuB,CAAC,CAAC;IACzE,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,6BAA6B,EAAE,+BAA+B,CAAC,CAAC;IACzF,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,qBAAqB,EAAE,uBAAuB,CAAC,CAAC;IACzE,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,0BAA0B,EAAE,4BAA4B,CAAC,CAAC;IACnF,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,4BAA4B,EAAE,8BAA8B,CAAC,CAAC;IACvF,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,2BAA2B,EAAE,6BAA6B,CAAC,CAAC;IACrF,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,8BAA8B,EAAE,gCAAgC,CAAC,CAAC;IAC3F,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,+BAA+B,EAAE,iCAAiC,CAAC,CAAC;IAC7F,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,4BAA4B,EAAE,8BAA8B,CAAC,CAAC;IACvF,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,uBAAuB,EAAE,yBAAyB,CAAC,CAAC;IAC7E,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,2BAA2B,EAAE,6BAA6B,CAAC,CAAC;IACrF,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,uBAAuB,EAAE,yBAAyB,CAAC,CAAC;IAE1E,OAAO,MAAM,CAAC;AAClB,CAAC"}

package/dist/cjs/lib/model/EventWithDevice.d.ts

@@ -0,0 +1,6 @@
+import { Device } from './Device';
+import { Event } from './Event';
+export declare class EventWithDevice extends Event {
+    device: Device;
+}
+export declare function NewEventWithDevice(): EventWithDevice;

package/dist/cjs/lib/model/EventWithDevice.js

@@ -0,0 +1,51 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EventWithDevice = void 0;
+exports.NewEventWithDevice = NewEventWithDevice;
+const Event_1 = require("./Event");
+const _1 = require(".");
+// EventWithDevice entity is an event with the device info (for display onlY)
+class EventWithDevice extends Event_1.Event {
+}
+exports.EventWithDevice = EventWithDevice;
+// New empty instance
+function NewEventWithDevice() {
+    let result = new EventWithDevice();
+    result.id = '';
+    result.createdOn = 0;
+    result.updatedOn = 0;
+    result.flag = 0;
+    result.accountId = '';
+    result.streamId = '';
+    result.deviceId = '';
+    result.alertId = '';
+    result.flowId = 0;
+    result.startTime = 0;
+    result.endTime = 0;
+    result.type = 0;
+    result.severity = 0;
+    result.score = 0;
+    result.probability = 0;
+    result.status = 0;
+    result.ruleType = 0;
+    result.ruleId = '';
+    result.sourceIp = '';
+    result.targetIp = '';
+    result.targetLocation = (0, _1.NewGeoData)();
+    result.description = '';
+    result.tags = [];
+    result.labels = [];
+    result.category = 0;
+    result.recommendedAction = '';
+    result.occurrences = [];
+    result.trafficDirection = 0;
+    result.confidenceScore = 0;
+    result.occurrencesCount = 0;
+    result.indicators = [];
+    result.source = '';
+    result.srcPort = 0;
+    result.dstPort = 0;
+    result.device = (0, _1.NewDevice)();
+    return result;
+}
+//# sourceMappingURL=EventWithDevice.js.map

package/dist/cjs/lib/model/EventWithDevice.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EventWithDevice.js","sourceRoot":"","sources":["../../../../src/lib/model/EventWithDevice.ts"],"names":[],"mappings":";;;AAeA,gDAsCC;AAnDD,mCAAgC;AAEhC,wBAA0C;AAE1C,6EAA6E;AAC7E,MAAa,eAAgB,SAAQ,aAAK;CAKzC;AALD,0CAKC;AAED,qBAAqB;AACrB,SAAgB,kBAAkB;IACjC,IAAI,MAAM,GAAqB,IAAI,eAAe,EAAE,CAAC;IACrD,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC;IACf,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC;IACrB,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC;IACrB,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC;IAChB,MAAM,CAAC,SAAS,GAAG,EAAE,CAAC;IACtB,MAAM,CAAC,QAAQ,GAAG,EAAE,CAAC;IACrB,MAAM,CAAC,QAAQ,GAAG,EAAE,CAAC;IACrB,MAAM,CAAC,OAAO,GAAG,EAAE,CAAC;IACpB,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IAClB,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC;IACrB,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC;IACnB,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC;IAChB,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC;IACpB,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC;IACjB,MAAM,CAAC,WAAW,GAAG,CAAC,CAAC;IACvB,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IAClB,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC;IACpB,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC;IACnB,MAAM,CAAC,QAAQ,GAAG,EAAE,CAAC;IACrB,MAAM,CAAC,QAAQ,GAAG,EAAE,CAAC;IACrB,MAAM,CAAC,cAAc,GAAG,IAAA,aAAU,GAAE,CAAC;IACrC,MAAM,CAAC,WAAW,GAAG,EAAE,CAAC;IACxB,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;IACjB,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC;IACnB,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC;IACpB,MAAM,CAAC,iBAAiB,GAAG,EAAE,CAAC;IAC9B,MAAM,CAAC,WAAW,GAAG,EAAE,CAAC;IACxB,MAAM,CAAC,gBAAgB,GAAG,CAAC,CAAC;IAC5B,MAAM,CAAC,eAAe,GAAG,CAAC,CAAC;IAC3B,MAAM,CAAC,gBAAgB,GAAG,CAAC,CAAC;IAC5B,MAAM,CAAC,UAAU,GAAG,EAAE,CAAC;IACvB,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC;IACnB,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC;IACnB,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC;IACnB,MAAM,CAAC,MAAM,GAAG,IAAA,YAAS,GAAE,CAAC;IAC5B,OAAO,MAAM,CAAC;AACf,CAAC"}

package/dist/cjs/lib/model/Feature.d.ts

@@ -0,0 +1,7 @@
+import { FeatureCode } from './FeatureCode';
+import { BaseEntity } from './BaseEntity';
+export declare class Feature extends BaseEntity {
+    code: FeatureCode;
+    name: string;
+}
+export declare function NewFeature(): Feature;

package/dist/cjs/lib/model/Feature.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Feature = void 0;
+exports.NewFeature = NewFeature;
+const BaseEntity_1 = require("./BaseEntity");
+// Feature represents a capability in the system
+// It is used for the feature toggle mechanism
+class Feature extends BaseEntity_1.BaseEntity {
+}
+exports.Feature = Feature;
+// New empty instance
+function NewFeature() {
+    let result = new Feature();
+    result.id = '';
+    result.createdOn = 0;
+    result.updatedOn = 0;
+    result.code = 0;
+    result.name = '';
+    return result;
+}
+//# sourceMappingURL=Feature.js.map

package/dist/cjs/lib/model/Feature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Feature.js","sourceRoot":"","sources":["../../../../src/lib/model/Feature.ts"],"names":[],"mappings":";;;AAiBA,gCAQC;AAvBD,6CAA0C;AAE1C,gDAAgD;AAChD,8CAA8C;AAC9C,MAAa,OAAQ,SAAQ,uBAAU;CAQtC;AARD,0BAQC;AAED,qBAAqB;AACrB,SAAgB,UAAU;IACzB,IAAI,MAAM,GAAa,IAAI,OAAO,EAAE,CAAC;IACrC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC;IACf,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC;IACrB,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC;IACrB,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC;IAChB,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;IACjB,OAAO,MAAM,CAAC;AACf,CAAC"}

package/dist/cjs/lib/model/FeatureCode.d.ts

@@ -0,0 +1,20 @@
+import { Tuple } from '.';
+export declare enum FeatureCode {
+    UNDEFINED = 0,
+    EVENTS_EXPORT = 1,
+    EVENT_SOURCE_FILES = 2,
+    EVENT_ACTION = 3,
+    DEVICES_EXPORT = 4,
+    DEVICE_NETWORK_MAP = 5,
+    DEVICE_ACTIONS = 6,
+    NETWORK_MAP = 7,
+    COMPLIANCE_REPORTS = 8,
+    CUSTOM_RULES = 9,
+    INTEGRATIONS = 10,
+    GENERAL_UPGRADE = 11,
+    ADD_DELETE_DEVICE = 12,
+    ADVANCED_INSIGHTS = 13,
+    NETWORK_TOPOLOGY = 14
+}
+export declare function GetFeatureCodes(): Tuple<FeatureCode, string>[];
+export declare function MapFeatureCodes(): Map<FeatureCode, string>;