@take2identity/verosint 0.2.36 → 0.2.38
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +10 -43
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -14,16 +14,10 @@
|
|
|
14
14
|
## Installation
|
|
15
15
|
|
|
16
16
|
Use the `verosint` tool to:
|
|
17
|
-
|
|
18
|
-
* Evaluate risk scores or create a rule set for a single set of identifiers
|
|
19
|
-
(email, IP, and/or phone number).
|
|
20
|
-
* Determine risk by running a batch evaluation for identifiers using a
|
|
21
|
-
[CSV](https://en.wikipedia.org/wiki/Comma-separated_values),
|
|
22
|
-
[LDIF](https://www.rfc-editor.org/rfc/rfc2849.html) files.
|
|
17
|
+
* Tag account's using the SignalPrint tagging endpoint to distinguish identities
|
|
23
18
|
* Send events to the SignalPrint endpoint to create a map of identities and access history.
|
|
24
19
|
* Generate an [LDAP Schema](https://www.rfc-editor.org/rfc/rfc4512#page-22)
|
|
25
|
-
file to store
|
|
26
|
-
entries.
|
|
20
|
+
file to store rules evaluation atttributes in user entries.
|
|
27
21
|
|
|
28
22
|
Download the binary from:
|
|
29
23
|
[releases page](https://gitlab.com/verosint/public/verosint/-/releases).
|
|
@@ -123,10 +117,10 @@ of the API key:
|
|
|
123
117
|
|
|
124
118
|
```shell
|
|
125
119
|
export VEROSINT_APIKEY="API key goes here"
|
|
126
|
-
verosint evaluate
|
|
120
|
+
verosint evaluate evaluate rule phone:15123944240 --ruleSetUuid 4f5ab21b-984c-455e-b889-b6b0272a4567
|
|
127
121
|
```
|
|
128
122
|
|
|
129
|
-
### Evaluating
|
|
123
|
+
### Evaluating Rules
|
|
130
124
|
|
|
131
125
|
#### Single Set of Identifiers
|
|
132
126
|
|
|
@@ -140,8 +134,6 @@ The CLI accepts the following identifiers.
|
|
|
140
134
|
| phone | Phone number in the [international phone number format](https://en.wikipedia.org/wiki/E.164) |
|
|
141
135
|
| userAgent | User agent string |
|
|
142
136
|
|
|
143
|
-
Note that `accountId` and `userAgent` identifiers are not available for risk score requests.
|
|
144
|
-
|
|
145
137
|
When providing a set of identifiers, the API expects one or more
|
|
146
138
|
identifiers (IP address, email, or phone number) and only one value per
|
|
147
139
|
identifier.
|
|
@@ -153,16 +145,11 @@ Responses are provided in the JSON format on the standard output.
|
|
|
153
145
|
|
|
154
146
|
##### Examples
|
|
155
147
|
|
|
156
|
-
######
|
|
148
|
+
###### 2. Evaluate an IPv6 address, a phone number and an email address for a Rules Set
|
|
157
149
|
|
|
158
150
|
```shell
|
|
159
|
-
verosint
|
|
160
|
-
```
|
|
161
|
-
|
|
162
|
-
###### 2. Evaluate an IPv6 address, a phone number and an email address for risk
|
|
151
|
+
verosint evalute rule ip:2607:fb91:1296:c7dc:a0c4:25a9:ac7a:4384 email:user@example.com phone:15123944240 --ruleSetUuid 4f5ab21b-984c-455e-b889-b6b0272a4567
|
|
163
152
|
|
|
164
|
-
```shell
|
|
165
|
-
verosint evaluate risk ip:2607:fb91:1296:c7dc:a0c4:25a9:ac7a:4384 email:user@example.com phone:15123944240
|
|
166
153
|
```
|
|
167
154
|
|
|
168
155
|
###### 3. Evaluate an IPv4 for address against a rule set already defined in the configuration
|
|
@@ -217,8 +204,8 @@ verosint evaluate rules ip:104.16.44.99
|
|
|
217
204
|
|
|
218
205
|
#### Batch Evaluation
|
|
219
206
|
|
|
220
|
-
Use input files to evaluate multiple sets of identifiers
|
|
221
|
-
|
|
207
|
+
Use input files to evaluate multiple sets of identifiers against rules.
|
|
208
|
+
Batch commands can use input and output files in CSV or
|
|
222
209
|
LDIF format, and can produce a report file formatted as JSON.
|
|
223
210
|
|
|
224
211
|
Processing time may take much longer with larger files, than for a
|
|
@@ -226,26 +213,6 @@ single set of identifiers.
|
|
|
226
213
|
|
|
227
214
|
##### Batch Evaluation Examples
|
|
228
215
|
|
|
229
|
-
###### 1. Executing Batch Risk Evaluation using CSV input/output format
|
|
230
|
-
|
|
231
|
-
The input file does not have to be fully populated for all identifiers.
|
|
232
|
-
For example, the following CSV-formatted input file is valid without a
|
|
233
|
-
phone number present on the last record:
|
|
234
|
-
|
|
235
|
-
```csv
|
|
236
|
-
ip,email,phone
|
|
237
|
-
104.16.44.99,babs@jensen.com,15123944240
|
|
238
|
-
2607:fb91:1296:c7dc:a0c4:25a9:ac7a:4384,alison@example.com,
|
|
239
|
-
```
|
|
240
|
-
|
|
241
|
-
To evaluate the same file and save it as `myRecords.csv`, run the
|
|
242
|
-
following command:
|
|
243
|
-
|
|
244
|
-
```shell
|
|
245
|
-
verosint evaluate risk-batch --inputFile myRecords.csv \
|
|
246
|
-
--outputFile riskOutput.csv --reportFile riskReport.json
|
|
247
|
-
```
|
|
248
|
-
|
|
249
216
|
###### 2. Executing Batch Rules Evaluation with column index and LDIF output
|
|
250
217
|
|
|
251
218
|
If using an input file that has multiple identifiers, you can provide a
|
|
@@ -273,7 +240,7 @@ verosint evaluate rules-batch ip:0 email:1 phone:2 \
|
|
|
273
240
|
|
|
274
241
|
You can submit events to the SignalPrint endpoint using the
|
|
275
242
|
`signalprint send-events` subcommand. This subcommand works like the
|
|
276
|
-
batch commands for
|
|
243
|
+
batch commands for rules. An event timestamp, IP address, and
|
|
277
244
|
user agent is required for each event. You can optionally add an
|
|
278
245
|
accountId, email, type, and/or phone with each event.
|
|
279
246
|
|
|
@@ -302,7 +269,7 @@ verosint signalprint send-events --inputFile events.csv
|
|
|
302
269
|
### Generating LDAP Schema
|
|
303
270
|
|
|
304
271
|
This command prints an LDAP schema that allows you to enrich existing
|
|
305
|
-
user entries in your directory with
|
|
272
|
+
user entries in your directory with rule evaluation data from
|
|
306
273
|
the API. The enterprise number (59592) in the object identifiers (OIDs)
|
|
307
274
|
is registered with the
|
|
308
275
|
[Internet Assigned Numbers Authority](https://www.iana.org/assignments/enterprise-numbers/).
|