@take2identity/verosint 0.2.193 → 0.2.195
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +24 -24
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -16,9 +16,9 @@
|
|
|
16
16
|
Use the `verosint` tool to:
|
|
17
17
|
|
|
18
18
|
* Send events to the SignalPrint endpoint to create a map of identities and access history.
|
|
19
|
-
* Evaluate
|
|
19
|
+
* Evaluate rule sets one by one or in bulk.
|
|
20
20
|
* Generate an [LDAP Schema](https://www.rfc-editor.org/rfc/rfc4512#page-22)
|
|
21
|
-
file to store
|
|
21
|
+
file to store rule set evaluation atttributes in user entries.
|
|
22
22
|
|
|
23
23
|
Download the binary from:
|
|
24
24
|
[releases page](https://gitlab.com/verosint/public/verosint/-/releases).
|
|
@@ -93,7 +93,7 @@ verosint evaluate rules-batch --help
|
|
|
93
93
|
|
|
94
94
|
The tool can read settings from a configuration file in a
|
|
95
95
|
[YAML](https://yaml.org/) format.
|
|
96
|
-
For example, you can store the API key as well as
|
|
96
|
+
For example, you can store the API key as well as rule sets inside the file.
|
|
97
97
|
|
|
98
98
|
By default, the tool looks for the configuration file `.verosint.yaml` in
|
|
99
99
|
your home directory. You can override this setting with the
|
|
@@ -126,7 +126,7 @@ verosint evaluate evaluate rule phone:15123944240 --ruleSetUuid 4f5ab21b-984c-45
|
|
|
126
126
|
When using commands involving an account ID you should
|
|
127
127
|
wrap the identifier in double quotes.
|
|
128
128
|
|
|
129
|
-
### Evaluating
|
|
129
|
+
### Evaluating Rule Sets
|
|
130
130
|
|
|
131
131
|
#### Single Set of Identifiers
|
|
132
132
|
|
|
@@ -155,44 +155,44 @@ Responses are provided in the JSON format on the standard output.
|
|
|
155
155
|
|
|
156
156
|
##### Examples
|
|
157
157
|
|
|
158
|
-
###### 2. Evaluate an IPv6 address, a phone number and an email address for a
|
|
158
|
+
###### 2. Evaluate an IPv6 address, a phone number and an email address for a Rule Set
|
|
159
159
|
|
|
160
160
|
```shell
|
|
161
161
|
verosint evalute rule ip:2607:fb91:1296:c7dc:a0c4:25a9:ac7a:4384 email:user@example.com phone:15123944240 --ruleSetUuid 4f5ab21b-984c-455e-b889-b6b0272a4567
|
|
162
162
|
|
|
163
163
|
```
|
|
164
164
|
|
|
165
|
-
###### 3. Evaluate an IPv4 for address against a
|
|
165
|
+
###### 3. Evaluate an IPv4 for address against a rule set already defined in the configuration
|
|
166
166
|
|
|
167
|
-
To obtain the UUID of the
|
|
168
|
-
[
|
|
169
|
-
the
|
|
167
|
+
To obtain the UUID of the rule set, visit the
|
|
168
|
+
[Rule Sets](https://app.verosint.com/rule-sets) configuration and copy the UUID of
|
|
169
|
+
the rule set you would like to evaluate.
|
|
170
170
|
|
|
171
|
-

|
|
172
172
|
|
|
173
173
|
```shell
|
|
174
174
|
verosint evalute rule ip:104.255.6.45 --ruleSetUuid 4f5ab21b-984c-455e-b889-b6b0272a4567
|
|
175
175
|
```
|
|
176
176
|
|
|
177
|
-
###### 4. Evaluate an Email address against a
|
|
177
|
+
###### 4. Evaluate an Email address against a rule set provided using a local file
|
|
178
178
|
|
|
179
|
-
You can export a
|
|
179
|
+
You can export a rule set defined in the [Rule Sets](https://app.verosint.com/rule-sets)
|
|
180
180
|
configuration into a local file as shown below.
|
|
181
181
|
|
|
182
|
-

|
|
183
183
|
|
|
184
184
|
This example evaluates the `babs@jensen.com` email address against the rule defined
|
|
185
|
-
in the `
|
|
185
|
+
in the `mfaruleset.json` file.
|
|
186
186
|
|
|
187
187
|
```shell
|
|
188
|
-
verosint evaluate rule email:babs@jensen.com --ruleSetFile
|
|
188
|
+
verosint evaluate rule email:babs@jensen.com --ruleSetFile mfaruleset.json
|
|
189
189
|
```
|
|
190
190
|
|
|
191
|
-
##### 5. Check if an IP address is within 100 kilometers of Austin, TX using a local
|
|
191
|
+
##### 5. Check if an IP address is within 100 kilometers of Austin, TX using a local rule set
|
|
192
192
|
|
|
193
|
-
You can place a
|
|
193
|
+
You can place a rule set inside a local configuration file. The following is
|
|
194
194
|
an example file that uses the `isWithin` function, which enables you to
|
|
195
|
-
create a
|
|
195
|
+
create a rule set for [geo-fencing](https://en.wikipedia.org/wiki/Geo-fence)
|
|
196
196
|
purposes:
|
|
197
197
|
|
|
198
198
|
```yaml
|
|
@@ -205,7 +205,7 @@ rules:
|
|
|
205
205
|
reason: This IP is not within 100 kilometers of Austin, Texas
|
|
206
206
|
```
|
|
207
207
|
|
|
208
|
-
The following example runs the same
|
|
208
|
+
The following example runs the same rule set saved in the default
|
|
209
209
|
configuration file against the `104.16.44.99` IP address:
|
|
210
210
|
|
|
211
211
|
```shell
|
|
@@ -214,7 +214,7 @@ verosint evaluate rules ip:104.16.44.99
|
|
|
214
214
|
|
|
215
215
|
#### Batch Evaluation
|
|
216
216
|
|
|
217
|
-
Use input files to evaluate multiple sets of identifiers against
|
|
217
|
+
Use input files to evaluate multiple sets of identifiers against rule sets.
|
|
218
218
|
Batch commands can use input and output files in CSV or
|
|
219
219
|
LDIF format, and can produce a report file formatted as JSON.
|
|
220
220
|
|
|
@@ -223,7 +223,7 @@ single set of identifiers.
|
|
|
223
223
|
|
|
224
224
|
##### Batch Evaluation Examples
|
|
225
225
|
|
|
226
|
-
###### 2. Executing Batch
|
|
226
|
+
###### 2. Executing Batch Rule Set Evaluation with column index and LDIF output
|
|
227
227
|
|
|
228
228
|
If using an input file that has multiple identifiers, you can provide a
|
|
229
229
|
column index (where 0 refers to the first column) to indicate where the
|
|
@@ -235,7 +235,7 @@ ipaddress,mail,telephone
|
|
|
235
235
|
104.16.44.99,babs@jensen.com,15123944240
|
|
236
236
|
```
|
|
237
237
|
|
|
238
|
-
Using the
|
|
238
|
+
Using the rule sets present in the default configuration file, the
|
|
239
239
|
following command generates LDIF-formatted output and JSON report
|
|
240
240
|
files:
|
|
241
241
|
|
|
@@ -250,7 +250,7 @@ verosint evaluate rules-batch ip:0 email:1 phone:2 \
|
|
|
250
250
|
|
|
251
251
|
You can submit events to the SignalPrint endpoint using the
|
|
252
252
|
`signalprint send-events` subcommand. This subcommand works like the
|
|
253
|
-
batch commands for
|
|
253
|
+
batch commands for rule sets. An IP address, a user agent, and an event
|
|
254
254
|
type are required for each event. You can optionally submit an
|
|
255
255
|
event timestamp, an account identifier, an email address, and
|
|
256
256
|
a phone number as well.
|
|
@@ -322,7 +322,7 @@ verosint signalprint send-events --inputFile events.csv
|
|
|
322
322
|
### Generating LDAP Schema
|
|
323
323
|
|
|
324
324
|
This command prints an LDAP schema that allows you to enrich existing
|
|
325
|
-
user entries in your directory with
|
|
325
|
+
user entries in your directory with rule set evaluation data from
|
|
326
326
|
the API. The enterprise number (59592) in the object identifiers (OIDs)
|
|
327
327
|
is registered with the
|
|
328
328
|
[Internet Assigned Numbers Authority](https://www.iana.org/assignments/enterprise-numbers/).
|