@vorionsys/security 1.0.0

package/dist/security/incident/actions/collect-evidence.d.ts

@@ -0,0 +1,95 @@
+/**
+ * Evidence Collection Action
+ *
+ * Automated evidence collection for incident forensics.
+ * Collects logs, system state, network captures, and memory dumps.
+ *
+ * @packageDocumentation
+ * @module security/incident/actions/collect-evidence
+ */
+import type { ActionDefinition } from '../types.js';
+export interface EvidenceTarget {
+    type: 'logs' | 'system_state' | 'network_capture' | 'memory_dump' | 'configuration' | 'database_audit' | 'file_snapshot';
+    source: string;
+    timeRange?: {
+        start: Date;
+        end: Date;
+    };
+    filters?: Record<string, unknown>;
+}
+export interface CollectionResult {
+    targetType: string;
+    source: string;
+    collected: boolean;
+    location?: string;
+    size?: number;
+    hash?: string;
+    timestamp: Date;
+    error?: string;
+}
+export interface EvidenceCollectionService {
+    /** Collect logs from a source */
+    collectLogs(source: string, timeRange?: {
+        start: Date;
+        end: Date;
+    }, filters?: Record<string, unknown>): Promise<{
+        success: boolean;
+        location: string;
+        size: number;
+        lineCount: number;
+    }>;
+    /** Capture system state */
+    captureSystemState(systemId: string): Promise<{
+        success: boolean;
+        location: string;
+        size: number;
+        components: string[];
+    }>;
+    /** Capture network traffic */
+    captureNetworkTraffic(interfaceId: string, duration: number, filters?: Record<string, unknown>): Promise<{
+        success: boolean;
+        location: string;
+        size: number;
+        packetCount: number;
+    }>;
+    /** Capture memory dump */
+    captureMemoryDump(processId: string): Promise<{
+        success: boolean;
+        location: string;
+        size: number;
+    }>;
+    /** Export configuration */
+    exportConfiguration(serviceId: string): Promise<{
+        success: boolean;
+        location: string;
+        size: number;
+    }>;
+    /** Export database audit logs */
+    exportDatabaseAudit(databaseId: string, timeRange?: {
+        start: Date;
+        end: Date;
+    }): Promise<{
+        success: boolean;
+        location: string;
+        size: number;
+        entryCount: number;
+    }>;
+    /** Create file snapshot */
+    createFileSnapshot(path: string): Promise<{
+        success: boolean;
+        location: string;
+        size: number;
+        fileCount: number;
+    }>;
+    /** Calculate file hash */
+    calculateHash(location: string): Promise<string>;
+    /** Verify evidence integrity */
+    verifyIntegrity(location: string, expectedHash: string): Promise<boolean>;
+}
+export declare function setEvidenceCollectionService(service: EvidenceCollectionService): void;
+export declare function getEvidenceCollectionService(): EvidenceCollectionService;
+/** Create a mock evidence collection service for testing only. */
+export declare function createMockEvidenceCollectionService(): EvidenceCollectionService;
+export declare const collectEvidenceAction: ActionDefinition;
+export default collectEvidenceAction;
+//# sourceMappingURL=collect-evidence.d.ts.map

package/dist/security/incident/actions/collect-evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"collect-evidence.d.ts","sourceRoot":"","sources":["../../../../src/security/incident/actions/collect-evidence.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,OAAO,KAAK,EAAE,gBAAgB,EAAyC,MAAM,aAAa,CAAC;AAQ3F,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,iBAAiB,GAAG,aAAa,GAAG,eAAe,GAAG,gBAAgB,GAAG,eAAe,CAAC;IACzH,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE;QACV,KAAK,EAAE,IAAI,CAAC;QACZ,GAAG,EAAE,IAAI,CAAC;KACX,CAAC;IACF,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,IAAI,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAMD,MAAM,WAAW,yBAAyB;IACxC,iCAAiC;IACjC,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE;QAAE,KAAK,EAAE,IAAI,CAAC;QAAC,GAAG,EAAE,IAAI,CAAA;KAAE,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC;QAC9G,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC,CAAC;IAEH,2BAA2B;IAC3B,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;QAC5C,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,EAAE,CAAC;KACtB,CAAC,CAAC;IAEH,8BAA8B;IAC9B,qBAAqB,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC;QACvG,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC,CAAC;IAEH,0BAA0B;IAC1B,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAC5C,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;KACd,CAAC,CAAC;IAEH,2BAA2B;IAC3B,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAC9C,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;KACd,CAAC,CAAC;IAEH,iCAAiC;IACjC,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE;QAAE,KAAK,EAAE,IAAI,CAAC;QAAC,GAAG,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC;QACvF,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC,CAAC;IAEH,2BAA2B;IAC3B,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QACxC,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC,CAAC;IAEH,0BAA0B;IAC1B,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAEjD,gCAAgC;IAChC,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC3E;AAoID,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,yBAAyB,GAAG,IAAI,CAErF;AAED,wBAAgB,4BAA4B,IAAI,yBAAyB,CAQxE;AAED,kEAAkE;AAClE,wBAAgB,mCAAmC,IAAI,yBAAyB,CAE/E;AA8XD,eAAO,MAAM,qBAAqB,EAAE,gBAiBnC,CAAC;AAEF,eAAe,qBAAqB,CAAC"}

package/dist/security/incident/actions/collect-evidence.js

@@ -0,0 +1,458 @@
+/**
+ * Evidence Collection Action
+ *
+ * Automated evidence collection for incident forensics.
+ * Collects logs, system state, network captures, and memory dumps.
+ *
+ * @packageDocumentation
+ * @module security/incident/actions/collect-evidence
+ */
+import * as crypto from 'crypto';
+import { createLogger } from '../../../common/logger.js';
+const logger = createLogger({ component: 'action-collect-evidence' });
+// ============================================================================
+// Default Mock Evidence Collection Service
+// ============================================================================
+class MockEvidenceCollectionService {
+    async collectLogs(source, timeRange, filters) {
+        logger.info('Collecting logs', { source, timeRange, filters });
+        await this.simulateOperation(2000);
+        return {
+            success: true,
+            location: `/evidence/${Date.now()}/logs/${source.replace(/[^a-zA-Z0-9]/g, '_')}.log.gz`,
+            size: 15728640, // 15 MB
+            lineCount: 250000,
+        };
+    }
+    async captureSystemState(systemId) {
+        logger.info('Capturing system state', { systemId });
+        await this.simulateOperation(3000);
+        return {
+            success: true,
+            location: `/evidence/${Date.now()}/system_state/${systemId}.tar.gz`,
+            size: 52428800, // 50 MB
+            components: ['processes', 'network_connections', 'open_files', 'environment', 'user_sessions'],
+        };
+    }
+    async captureNetworkTraffic(interfaceId, duration, filters) {
+        logger.info('Capturing network traffic', { interfaceId, duration, filters });
+        await this.simulateOperation(Math.min(duration * 1000, 5000)); // Simulate capture
+        return {
+            success: true,
+            location: `/evidence/${Date.now()}/pcap/${interfaceId}.pcap`,
+            size: 104857600, // 100 MB
+            packetCount: 1500000,
+        };
+    }
+    async captureMemoryDump(processId) {
+        logger.info('Capturing memory dump', { processId });
+        await this.simulateOperation(5000);
+        return {
+            success: true,
+            location: `/evidence/${Date.now()}/memory/${processId}.dmp`,
+            size: 2147483648, // 2 GB
+        };
+    }
+    async exportConfiguration(serviceId) {
+        logger.info('Exporting configuration', { serviceId });
+        await this.simulateOperation(1000);
+        return {
+            success: true,
+            location: `/evidence/${Date.now()}/config/${serviceId}.json`,
+            size: 65536, // 64 KB
+        };
+    }
+    async exportDatabaseAudit(databaseId, timeRange) {
+        logger.info('Exporting database audit', { databaseId, timeRange });
+        await this.simulateOperation(4000);
+        return {
+            success: true,
+            location: `/evidence/${Date.now()}/db_audit/${databaseId}.sql.gz`,
+            size: 31457280, // 30 MB
+            entryCount: 500000,
+        };
+    }
+    async createFileSnapshot(path) {
+        logger.info('Creating file snapshot', { path });
+        await this.simulateOperation(6000);
+        return {
+            success: true,
+            location: `/evidence/${Date.now()}/snapshot/${path.replace(/\//g, '_')}.tar.gz`,
+            size: 524288000, // 500 MB
+            fileCount: 15000,
+        };
+    }
+    async calculateHash(location) {
+        // Generate a mock SHA-256 hash
+        return crypto.createHash('sha256').update(location + Date.now()).digest('hex');
+    }
+    async verifyIntegrity(location, expectedHash) {
+        // Mock verification always passes
+        return true;
+    }
+    simulateOperation(ms) {
+        return new Promise((resolve) => setTimeout(resolve, ms));
+    }
+}
+// ============================================================================
+// Singleton Evidence Collection Service
+// ============================================================================
+let evidenceService = null;
+export function setEvidenceCollectionService(service) {
+    evidenceService = service;
+}
+export function getEvidenceCollectionService() {
+    if (!evidenceService) {
+        throw new Error('No evidence collection service configured. Call setEvidenceCollectionService() with a real implementation before use. ' +
+            'For tests, use createMockEvidenceCollectionService().');
+    }
+    return evidenceService;
+}
+/** Create a mock evidence collection service for testing only. */
+export function createMockEvidenceCollectionService() {
+    return new MockEvidenceCollectionService();
+}
+// ============================================================================
+// Action Implementation
+// ============================================================================
+async function executeEvidenceCollection(context) {
+    const service = getEvidenceCollectionService();
+    const { incident, logger: actionLogger, setVariable, addEvidence } = context;
+    const startTime = Date.now();
+    const results = [];
+    // Determine evidence targets based on incident
+    const targets = determineEvidenceTargets(incident.affectedResources, incident.type, incident.metadata);
+    if (targets.length === 0) {
+        actionLogger.warn('No evidence targets identified');
+        return {
+            success: true,
+            output: { message: 'No evidence targets identified', results: [] },
+            metrics: { durationMs: Date.now() - startTime, itemsProcessed: 0 },
+            canRollback: false,
+        };
+    }
+    actionLogger.info('Starting evidence collection', {
+        incidentId: incident.id,
+        targetCount: targets.length,
+        targetTypes: Array.from(new Set(targets.map((t) => t.type))),
+    });
+    let successCount = 0;
+    let failureCount = 0;
+    let totalSize = 0;
+    // Set time range for log collection (past 24 hours by default)
+    const timeRange = {
+        start: new Date(incident.detectedAt.getTime() - 24 * 60 * 60 * 1000),
+        end: incident.detectedAt,
+    };
+    for (const target of targets) {
+        const result = {
+            targetType: target.type,
+            source: target.source,
+            collected: false,
+            timestamp: new Date(),
+        };
+        try {
+            actionLogger.info('Collecting evidence', {
+                type: target.type,
+                source: target.source,
+            });
+            switch (target.type) {
+                case 'logs': {
+                    const logResult = await service.collectLogs(target.source, target.timeRange || timeRange, target.filters);
+                    result.collected = logResult.success;
+                    result.location = logResult.location;
+                    result.size = logResult.size;
+                    if (logResult.success) {
+                        result.hash = await service.calculateHash(logResult.location);
+                        await addEvidence({
+                            type: 'log',
+                            name: `${target.source} logs`,
+                            description: `Logs collected from ${target.source} (${logResult.lineCount} lines)`,
+                            source: target.source,
+                            collectedBy: 'automated-evidence-collection',
+                            hash: result.hash,
+                            size: logResult.size,
+                            location: logResult.location,
+                            metadata: { lineCount: logResult.lineCount, timeRange },
+                        });
+                    }
+                    break;
+                }
+                case 'system_state': {
+                    const stateResult = await service.captureSystemState(target.source);
+                    result.collected = stateResult.success;
+                    result.location = stateResult.location;
+                    result.size = stateResult.size;
+                    if (stateResult.success) {
+                        result.hash = await service.calculateHash(stateResult.location);
+                        await addEvidence({
+                            type: 'other',
+                            name: `${target.source} system state`,
+                            description: `System state capture (${stateResult.components.join(', ')})`,
+                            source: target.source,
+                            collectedBy: 'automated-evidence-collection',
+                            hash: result.hash,
+                            size: stateResult.size,
+                            location: stateResult.location,
+                            metadata: { components: stateResult.components },
+                        });
+                    }
+                    break;
+                }
+                case 'network_capture': {
+                    const pcapResult = await service.captureNetworkTraffic(target.source, 60, // 60 seconds capture
+                    target.filters);
+                    result.collected = pcapResult.success;
+                    result.location = pcapResult.location;
+                    result.size = pcapResult.size;
+                    if (pcapResult.success) {
+                        result.hash = await service.calculateHash(pcapResult.location);
+                        await addEvidence({
+                            type: 'network_capture',
+                            name: `${target.source} network capture`,
+                            description: `Network traffic capture (${pcapResult.packetCount} packets)`,
+                            source: target.source,
+                            collectedBy: 'automated-evidence-collection',
+                            hash: result.hash,
+                            size: pcapResult.size,
+                            location: pcapResult.location,
+                            metadata: { packetCount: pcapResult.packetCount },
+                        });
+                    }
+                    break;
+                }
+                case 'memory_dump': {
+                    const memResult = await service.captureMemoryDump(target.source);
+                    result.collected = memResult.success;
+                    result.location = memResult.location;
+                    result.size = memResult.size;
+                    if (memResult.success) {
+                        result.hash = await service.calculateHash(memResult.location);
+                        await addEvidence({
+                            type: 'memory_dump',
+                            name: `${target.source} memory dump`,
+                            description: `Memory dump of process ${target.source}`,
+                            source: target.source,
+                            collectedBy: 'automated-evidence-collection',
+                            hash: result.hash,
+                            size: memResult.size,
+                            location: memResult.location,
+                        });
+                    }
+                    break;
+                }
+                case 'configuration': {
+                    const configResult = await service.exportConfiguration(target.source);
+                    result.collected = configResult.success;
+                    result.location = configResult.location;
+                    result.size = configResult.size;
+                    if (configResult.success) {
+                        result.hash = await service.calculateHash(configResult.location);
+                        await addEvidence({
+                            type: 'configuration',
+                            name: `${target.source} configuration`,
+                            description: `Configuration export for ${target.source}`,
+                            source: target.source,
+                            collectedBy: 'automated-evidence-collection',
+                            hash: result.hash,
+                            size: configResult.size,
+                            location: configResult.location,
+                        });
+                    }
+                    break;
+                }
+                case 'database_audit': {
+                    const auditResult = await service.exportDatabaseAudit(target.source, target.timeRange || timeRange);
+                    result.collected = auditResult.success;
+                    result.location = auditResult.location;
+                    result.size = auditResult.size;
+                    if (auditResult.success) {
+                        result.hash = await service.calculateHash(auditResult.location);
+                        await addEvidence({
+                            type: 'log',
+                            name: `${target.source} database audit`,
+                            description: `Database audit logs (${auditResult.entryCount} entries)`,
+                            source: target.source,
+                            collectedBy: 'automated-evidence-collection',
+                            hash: result.hash,
+                            size: auditResult.size,
+                            location: auditResult.location,
+                            metadata: { entryCount: auditResult.entryCount, timeRange },
+                        });
+                    }
+                    break;
+                }
+                case 'file_snapshot': {
+                    const snapResult = await service.createFileSnapshot(target.source);
+                    result.collected = snapResult.success;
+                    result.location = snapResult.location;
+                    result.size = snapResult.size;
+                    if (snapResult.success) {
+                        result.hash = await service.calculateHash(snapResult.location);
+                        await addEvidence({
+                            type: 'file',
+                            name: `${target.source} snapshot`,
+                            description: `File snapshot (${snapResult.fileCount} files)`,
+                            source: target.source,
+                            collectedBy: 'automated-evidence-collection',
+                            hash: result.hash,
+                            size: snapResult.size,
+                            location: snapResult.location,
+                            metadata: { fileCount: snapResult.fileCount },
+                        });
+                    }
+                    break;
+                }
+                default:
+                    actionLogger.warn('Unknown evidence type', { type: target.type });
+            }
+            if (result.collected) {
+                successCount++;
+                totalSize += result.size || 0;
+                actionLogger.info('Evidence collected', {
+                    type: target.type,
+                    source: target.source,
+                    location: result.location,
+                    size: result.size,
+                });
+            }
+            else {
+                failureCount++;
+            }
+        }
+        catch (error) {
+            result.error = error instanceof Error ? error.message : String(error);
+            failureCount++;
+            actionLogger.error('Evidence collection failed', {
+                type: target.type,
+                source: target.source,
+                error: result.error,
+            });
+        }
+        results.push(result);
+    }
+    // Store results
+    setVariable('evidence_collection_results', results);
+    const durationMs = Date.now() - startTime;
+    const success = successCount > 0; // Partial success is acceptable
+    actionLogger.info('Evidence collection completed', {
+        success,
+        successCount,
+        failureCount,
+        totalSize,
+        durationMs,
+    });
+    return {
+        success,
+        output: {
+            message: success
+                ? `Collected ${successCount} evidence item(s), total size: ${formatBytes(totalSize)}`
+                : 'Failed to collect any evidence',
+            results,
+            successCount,
+            failureCount,
+            totalSize,
+        },
+        metrics: {
+            durationMs,
+            itemsProcessed: successCount,
+            itemsFailed: failureCount,
+        },
+        canRollback: false, // Evidence collection cannot be rolled back
+    };
+}
+// ============================================================================
+// Helper Functions
+// ============================================================================
+function determineEvidenceTargets(affectedResources, incidentType, metadata) {
+    const targets = [];
+    // Always collect security logs
+    targets.push({
+        type: 'logs',
+        source: 'security-events',
+    });
+    // Collect application logs
+    targets.push({
+        type: 'logs',
+        source: 'application',
+    });
+    // Collect authentication logs
+    targets.push({
+        type: 'logs',
+        source: 'authentication',
+    });
+    // Add targets based on affected resources
+    for (const resource of affectedResources) {
+        if (resource.startsWith('server:')) {
+            const serverId = resource.replace('server:', '');
+            targets.push({ type: 'system_state', source: serverId }, { type: 'logs', source: `server:${serverId}` });
+        }
+        else if (resource.startsWith('database:')) {
+            const dbId = resource.replace('database:', '');
+            targets.push({ type: 'database_audit', source: dbId });
+        }
+        else if (resource.startsWith('service:')) {
+            const serviceId = resource.replace('service:', '');
+            targets.push({ type: 'configuration', source: serviceId }, { type: 'logs', source: `service:${serviceId}` });
+        }
+    }
+    // Add targets based on incident type
+    if (incidentType === 'data_breach') {
+        targets.push({ type: 'database_audit', source: 'all-databases' });
+    }
+    else if (incidentType === 'malware' || incidentType === 'ransomware') {
+        // Add memory dumps for malware analysis
+        const affectedProcesses = metadata?.['affectedProcesses'];
+        if (affectedProcesses) {
+            for (const proc of affectedProcesses) {
+                targets.push({ type: 'memory_dump', source: proc });
+            }
+        }
+        // Add file snapshots
+        const affectedPaths = metadata?.['affectedPaths'];
+        if (affectedPaths) {
+            for (const path of affectedPaths) {
+                targets.push({ type: 'file_snapshot', source: path });
+            }
+        }
+    }
+    else if (incidentType === 'denial_of_service') {
+        targets.push({ type: 'network_capture', source: 'primary-interface' });
+    }
+    // Add custom targets from metadata
+    const customTargets = metadata?.['evidenceTargets'];
+    if (customTargets) {
+        targets.push(...customTargets);
+    }
+    return targets;
+}
+function formatBytes(bytes) {
+    if (bytes === 0)
+        return '0 Bytes';
+    const k = 1024;
+    const sizes = ['Bytes', 'KB', 'MB', 'GB', 'TB'];
+    const i = Math.floor(Math.log(bytes) / Math.log(k));
+    return parseFloat((bytes / Math.pow(k, i)).toFixed(2)) + ' ' + sizes[i];
+}
+// ============================================================================
+// Action Definition Export
+// ============================================================================
+export const collectEvidenceAction = {
+    id: 'collect-evidence',
+    name: 'Collect Forensic Evidence',
+    description: 'Automatically collect and preserve forensic evidence including logs, system state, and network captures',
+    category: 'evidence',
+    riskLevel: 'low',
+    requiresApproval: false,
+    supportsRollback: false,
+    defaultTimeoutMs: 600000, // 10 minutes (evidence collection can take time)
+    maxRetries: 2,
+    execute: executeEvidenceCollection,
+    validate: async (context) => {
+        const { incident } = context;
+        // Always valid - we can always collect some evidence
+        return { valid: true };
+    },
+};
+export default collectEvidenceAction;
+//# sourceMappingURL=collect-evidence.js.map

package/dist/security/incident/actions/collect-evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"collect-evidence.js","sourceRoot":"","sources":["../../../../src/security/incident/actions/collect-evidence.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAGzD,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,yBAAyB,EAAE,CAAC,CAAC;AA6FtE,+EAA+E;AAC/E,2CAA2C;AAC3C,+EAA+E;AAE/E,MAAM,6BAA6B;IACjC,KAAK,CAAC,WAAW,CACf,MAAc,EACd,SAAsC,EACtC,OAAiC;QAEjC,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;QAC/D,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO;YACL,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,aAAa,IAAI,CAAC,GAAG,EAAE,SAAS,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,SAAS;YACvF,IAAI,EAAE,QAAQ,EAAE,QAAQ;YACxB,SAAS,EAAE,MAAM;SAClB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,QAAgB;QAMvC,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QACpD,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO;YACL,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,aAAa,IAAI,CAAC,GAAG,EAAE,iBAAiB,QAAQ,SAAS;YACnE,IAAI,EAAE,QAAQ,EAAE,QAAQ;YACxB,UAAU,EAAE,CAAC,WAAW,EAAE,qBAAqB,EAAE,YAAY,EAAE,aAAa,EAAE,eAAe,CAAC;SAC/F,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,qBAAqB,CACzB,WAAmB,EACnB,QAAgB,EAChB,OAAiC;QAEjC,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QAC7E,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,mBAAmB;QAClF,OAAO;YACL,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,aAAa,IAAI,CAAC,GAAG,EAAE,SAAS,WAAW,OAAO;YAC5D,IAAI,EAAE,SAAS,EAAE,SAAS;YAC1B,WAAW,EAAE,OAAO;SACrB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,SAAiB;QAKvC,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QACpD,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO;YACL,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,aAAa,IAAI,CAAC,GAAG,EAAE,WAAW,SAAS,MAAM;YAC3D,IAAI,EAAE,UAAU,EAAE,OAAO;SAC1B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,SAAiB;QAKzC,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QACtD,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO;YACL,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,aAAa,IAAI,CAAC,GAAG,EAAE,WAAW,SAAS,OAAO;YAC5D,IAAI,EAAE,KAAK,EAAE,QAAQ;SACtB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,mBAAmB,CACvB,UAAkB,EAClB,SAAsC;QAEtC,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;QACnE,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO;YACL,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,aAAa,IAAI,CAAC,GAAG,EAAE,aAAa,UAAU,SAAS;YACjE,IAAI,EAAE,QAAQ,EAAE,QAAQ;YACxB,UAAU,EAAE,MAAM;SACnB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,IAAY;QAMnC,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO;YACL,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,aAAa,IAAI,CAAC,GAAG,EAAE,aAAa,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,SAAS;YAC/E,IAAI,EAAE,SAAS,EAAE,SAAS;YAC1B,SAAS,EAAE,KAAK;SACjB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,QAAgB;QAClC,+BAA+B;QAC/B,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjF,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,QAAgB,EAAE,YAAoB;QAC1D,kCAAkC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,iBAAiB,CAAC,EAAU;QAClC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IAC3D,CAAC;CACF;AAED,+EAA+E;AAC/E,wCAAwC;AACxC,+EAA+E;AAE/E,IAAI,eAAe,GAAqC,IAAI,CAAC;AAE7D,MAAM,UAAU,4BAA4B,CAAC,OAAkC;IAC7E,eAAe,GAAG,OAAO,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,4BAA4B;IAC1C,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,wHAAwH;YACxH,uDAAuD,CACxD,CAAC;IACJ,CAAC;IACD,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,mCAAmC;IACjD,OAAO,IAAI,6BAA6B,EAAE,CAAC;AAC7C,CAAC;AAED,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E,KAAK,UAAU,yBAAyB,CAAC,OAAsB;IAC7D,MAAM,OAAO,GAAG,4BAA4B,EAAE,CAAC;IAC/C,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IAC7E,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAuB,EAAE,CAAC;IAEvC,+CAA+C;IAC/C,MAAM,OAAO,GAAG,wBAAwB,CAAC,QAAQ,CAAC,iBAAiB,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAEvG,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,YAAY,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QACpD,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,EAAE,OAAO,EAAE,gCAAgC,EAAE,OAAO,EAAE,EAAE,EAAE;YAClE,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,cAAc,EAAE,CAAC,EAAE;YAClE,WAAW,EAAE,KAAK;SACnB,CAAC;IACJ,CAAC;IAED,YAAY,CAAC,IAAI,CAAC,8BAA8B,EAAE;QAChD,UAAU,EAAE,QAAQ,CAAC,EAAE;QACvB,WAAW,EAAE,OAAO,CAAC,MAAM;QAC3B,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;KAC7D,CAAC,CAAC;IAEH,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,+DAA+D;IAC/D,MAAM,SAAS,GAAG;QAChB,KAAK,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QACpE,GAAG,EAAE,QAAQ,CAAC,UAAU;KACzB,CAAC;IAEF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAqB;YAC/B,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,SAAS,EAAE,KAAK;YAChB,SAAS,EAAE,IAAI,IAAI,EAAE;SACtB,CAAC;QAEF,IAAI,CAAC;YACH,YAAY,CAAC,IAAI,CAAC,qBAAqB,EAAE;gBACvC,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC,CAAC;YAEH,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;gBACpB,KAAK,MAAM,CAAC,CAAC,CAAC;oBACZ,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,WAAW,CACzC,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,SAAS,IAAI,SAAS,EAC7B,MAAM,CAAC,OAAO,CACf,CAAC;oBACF,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC;oBACrC,MAAM,CAAC,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC;oBACrC,MAAM,CAAC,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;oBAE7B,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;wBACtB,MAAM,CAAC,IAAI,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;wBAC9D,MAAM,WAAW,CAAC;4BAChB,IAAI,EAAE,KAAK;4BACX,IAAI,EAAE,GAAG,MAAM,CAAC,MAAM,OAAO;4BAC7B,WAAW,EAAE,uBAAuB,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,SAAS,SAAS;4BAClF,MAAM,EAAE,MAAM,CAAC,MAAM;4BACrB,WAAW,EAAE,+BAA+B;4BAC5C,IAAI,EAAE,MAAM,CAAC,IAAI;4BACjB,IAAI,EAAE,SAAS,CAAC,IAAI;4BACpB,QAAQ,EAAE,SAAS,CAAC,QAAQ;4BAC5B,QAAQ,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,SAAS,EAAE;yBACxD,CAAC,CAAC;oBACL,CAAC;oBACD,MAAM;gBACR,CAAC;gBAED,KAAK,cAAc,CAAC,CAAC,CAAC;oBACpB,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;oBACpE,MAAM,CAAC,SAAS,GAAG,WAAW,CAAC,OAAO,CAAC;oBACvC,MAAM,CAAC,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC;oBACvC,MAAM,CAAC,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC;oBAE/B,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;wBACxB,MAAM,CAAC,IAAI,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;wBAChE,MAAM,WAAW,CAAC;4BAChB,IAAI,EAAE,OAAO;4BACb,IAAI,EAAE,GAAG,MAAM,CAAC,MAAM,eAAe;4BACrC,WAAW,EAAE,yBAAyB,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;4BAC1E,MAAM,EAAE,MAAM,CAAC,MAAM;4BACrB,WAAW,EAAE,+BAA+B;4BAC5C,IAAI,EAAE,MAAM,CAAC,IAAI;4BACjB,IAAI,EAAE,WAAW,CAAC,IAAI;4BACtB,QAAQ,EAAE,WAAW,CAAC,QAAQ;4BAC9B,QAAQ,EAAE,EAAE,UAAU,EAAE,WAAW,CAAC,UAAU,EAAE;yBACjD,CAAC,CAAC;oBACL,CAAC;oBACD,MAAM;gBACR,CAAC;gBAED,KAAK,iBAAiB,CAAC,CAAC,CAAC;oBACvB,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,qBAAqB,CACpD,MAAM,CAAC,MAAM,EACb,EAAE,EAAE,qBAAqB;oBACzB,MAAM,CAAC,OAAO,CACf,CAAC;oBACF,MAAM,CAAC,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC;oBACtC,MAAM,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;oBACtC,MAAM,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;oBAE9B,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;wBACvB,MAAM,CAAC,IAAI,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;wBAC/D,MAAM,WAAW,CAAC;4BAChB,IAAI,EAAE,iBAAiB;4BACvB,IAAI,EAAE,GAAG,MAAM,CAAC,MAAM,kBAAkB;4BACxC,WAAW,EAAE,4BAA4B,UAAU,CAAC,WAAW,WAAW;4BAC1E,MAAM,EAAE,MAAM,CAAC,MAAM;4BACrB,WAAW,EAAE,+BAA+B;4BAC5C,IAAI,EAAE,MAAM,CAAC,IAAI;4BACjB,IAAI,EAAE,UAAU,CAAC,IAAI;4BACrB,QAAQ,EAAE,UAAU,CAAC,QAAQ;4BAC7B,QAAQ,EAAE,EAAE,WAAW,EAAE,UAAU,CAAC,WAAW,EAAE;yBAClD,CAAC,CAAC;oBACL,CAAC;oBACD,MAAM;gBACR,CAAC;gBAED,KAAK,aAAa,CAAC,CAAC,CAAC;oBACnB,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;oBACjE,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC;oBACrC,MAAM,CAAC,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC;oBACrC,MAAM,CAAC,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;oBAE7B,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;wBACtB,MAAM,CAAC,IAAI,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;wBAC9D,MAAM,WAAW,CAAC;4BAChB,IAAI,EAAE,aAAa;4BACnB,IAAI,EAAE,GAAG,MAAM,CAAC,MAAM,cAAc;4BACpC,WAAW,EAAE,0BAA0B,MAAM,CAAC,MAAM,EAAE;4BACtD,MAAM,EAAE,MAAM,CAAC,MAAM;4BACrB,WAAW,EAAE,+BAA+B;4BAC5C,IAAI,EAAE,MAAM,CAAC,IAAI;4BACjB,IAAI,EAAE,SAAS,CAAC,IAAI;4BACpB,QAAQ,EAAE,SAAS,CAAC,QAAQ;yBAC7B,CAAC,CAAC;oBACL,CAAC;oBACD,MAAM;gBACR,CAAC;gBAED,KAAK,eAAe,CAAC,CAAC,CAAC;oBACrB,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;oBACtE,MAAM,CAAC,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC;oBACxC,MAAM,CAAC,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC;oBACxC,MAAM,CAAC,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC;oBAEhC,IAAI,YAAY,CAAC,OAAO,EAAE,CAAC;wBACzB,MAAM,CAAC,IAAI,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;wBACjE,MAAM,WAAW,CAAC;4BAChB,IAAI,EAAE,eAAe;4BACrB,IAAI,EAAE,GAAG,MAAM,CAAC,MAAM,gBAAgB;4BACtC,WAAW,EAAE,4BAA4B,MAAM,CAAC,MAAM,EAAE;4BACxD,MAAM,EAAE,MAAM,CAAC,MAAM;4BACrB,WAAW,EAAE,+BAA+B;4BAC5C,IAAI,EAAE,MAAM,CAAC,IAAI;4BACjB,IAAI,EAAE,YAAY,CAAC,IAAI;4BACvB,QAAQ,EAAE,YAAY,CAAC,QAAQ;yBAChC,CAAC,CAAC;oBACL,CAAC;oBACD,MAAM;gBACR,CAAC;gBAED,KAAK,gBAAgB,CAAC,CAAC,CAAC;oBACtB,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,mBAAmB,CACnD,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,SAAS,IAAI,SAAS,CAC9B,CAAC;oBACF,MAAM,CAAC,SAAS,GAAG,WAAW,CAAC,OAAO,CAAC;oBACvC,MAAM,CAAC,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC;oBACvC,MAAM,CAAC,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC;oBAE/B,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;wBACxB,MAAM,CAAC,IAAI,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;wBAChE,MAAM,WAAW,CAAC;4BAChB,IAAI,EAAE,KAAK;4BACX,IAAI,EAAE,GAAG,MAAM,CAAC,MAAM,iBAAiB;4BACvC,WAAW,EAAE,wBAAwB,WAAW,CAAC,UAAU,WAAW;4BACtE,MAAM,EAAE,MAAM,CAAC,MAAM;4BACrB,WAAW,EAAE,+BAA+B;4BAC5C,IAAI,EAAE,MAAM,CAAC,IAAI;4BACjB,IAAI,EAAE,WAAW,CAAC,IAAI;4BACtB,QAAQ,EAAE,WAAW,CAAC,QAAQ;4BAC9B,QAAQ,EAAE,EAAE,UAAU,EAAE,WAAW,CAAC,UAAU,EAAE,SAAS,EAAE;yBAC5D,CAAC,CAAC;oBACL,CAAC;oBACD,MAAM;gBACR,CAAC;gBAED,KAAK,eAAe,CAAC,CAAC,CAAC;oBACrB,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;oBACnE,MAAM,CAAC,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC;oBACtC,MAAM,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;oBACtC,MAAM,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;oBAE9B,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;wBACvB,MAAM,CAAC,IAAI,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;wBAC/D,MAAM,WAAW,CAAC;4BAChB,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,GAAG,MAAM,CAAC,MAAM,WAAW;4BACjC,WAAW,EAAE,kBAAkB,UAAU,CAAC,SAAS,SAAS;4BAC5D,MAAM,EAAE,MAAM,CAAC,MAAM;4BACrB,WAAW,EAAE,+BAA+B;4BAC5C,IAAI,EAAE,MAAM,CAAC,IAAI;4BACjB,IAAI,EAAE,UAAU,CAAC,IAAI;4BACrB,QAAQ,EAAE,UAAU,CAAC,QAAQ;4BAC7B,QAAQ,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE;yBAC9C,CAAC,CAAC;oBACL,CAAC;oBACD,MAAM;gBACR,CAAC;gBAED;oBACE,YAAY,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YACtE,CAAC;YAED,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBACrB,YAAY,EAAE,CAAC;gBACf,SAAS,IAAI,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC;gBAC9B,YAAY,CAAC,IAAI,CAAC,oBAAoB,EAAE;oBACtC,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,MAAM,CAAC,IAAI;iBAClB,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,YAAY,EAAE,CAAC;YACjB,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACtE,YAAY,EAAE,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,4BAA4B,EAAE;gBAC/C,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,KAAK,EAAE,MAAM,CAAC,KAAK;aACpB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;IAED,gBAAgB;IAChB,WAAW,CAAC,6BAA6B,EAAE,OAAO,CAAC,CAAC;IAEpD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAC1C,MAAM,OAAO,GAAG,YAAY,GAAG,CAAC,CAAC,CAAC,gCAAgC;IAElE,YAAY,CAAC,IAAI,CAAC,+BAA+B,EAAE;QACjD,OAAO;QACP,YAAY;QACZ,YAAY;QACZ,SAAS;QACT,UAAU;KACX,CAAC,CAAC;IAEH,OAAO;QACL,OAAO;QACP,MAAM,EAAE;YACN,OAAO,EAAE,OAAO;gBACd,CAAC,CAAC,aAAa,YAAY,kCAAkC,WAAW,CAAC,SAAS,CAAC,EAAE;gBACrF,CAAC,CAAC,gCAAgC;YACpC,OAAO;YACP,YAAY;YACZ,YAAY;YACZ,SAAS;SACV;QACD,OAAO,EAAE;YACP,UAAU;YACV,cAAc,EAAE,YAAY;YAC5B,WAAW,EAAE,YAAY;SAC1B;QACD,WAAW,EAAE,KAAK,EAAE,4CAA4C;KACjE,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E,SAAS,wBAAwB,CAC/B,iBAA2B,EAC3B,YAAoB,EACpB,QAAkC;IAElC,MAAM,OAAO,GAAqB,EAAE,CAAC;IAErC,+BAA+B;IAC/B,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,iBAAiB;KAC1B,CAAC,CAAC;IAEH,2BAA2B;IAC3B,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,aAAa;KACtB,CAAC,CAAC;IAEH,8BAA8B;IAC9B,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,gBAAgB;KACzB,CAAC,CAAC;IAEH,0CAA0C;IAC1C,KAAK,MAAM,QAAQ,IAAI,iBAAiB,EAAE,CAAC;QACzC,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YACjD,OAAO,CAAC,IAAI,CACV,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,EAC1C,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,QAAQ,EAAE,EAAE,CAC/C,CAAC;QACJ,CAAC;aAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAC/C,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;aAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3C,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YACnD,OAAO,CAAC,IAAI,CACV,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,SAAS,EAAE,EAC5C,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,SAAS,EAAE,EAAE,CACjD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,qCAAqC;IACrC,IAAI,YAAY,KAAK,aAAa,EAAE,CAAC;QACnC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;IACpE,CAAC;SAAM,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,YAAY,EAAE,CAAC;QACvE,wCAAwC;QACxC,MAAM,iBAAiB,GAAG,QAAQ,EAAE,CAAC,mBAAmB,CAAyB,CAAC;QAClF,IAAI,iBAAiB,EAAE,CAAC;YACtB,KAAK,MAAM,IAAI,IAAI,iBAAiB,EAAE,CAAC;gBACrC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;QAED,qBAAqB;QACrB,MAAM,aAAa,GAAG,QAAQ,EAAE,CAAC,eAAe,CAAyB,CAAC;QAC1E,IAAI,aAAa,EAAE,CAAC;YAClB,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;gBACjC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;IACH,CAAC;SAAM,IAAI,YAAY,KAAK,mBAAmB,EAAE,CAAC;QAChD,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,mCAAmC;IACnC,MAAM,aAAa,GAAG,QAAQ,EAAE,CAAC,iBAAiB,CAAiC,CAAC;IACpF,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAClC,MAAM,CAAC,GAAG,IAAI,CAAC;IACf,MAAM,KAAK,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAChD,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,OAAO,UAAU,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,+EAA+E;AAC/E,2BAA2B;AAC3B,+EAA+E;AAE/E,MAAM,CAAC,MAAM,qBAAqB,GAAqB;IACrD,EAAE,EAAE,kBAAkB;IACtB,IAAI,EAAE,2BAA2B;IACjC,WAAW,EAAE,yGAAyG;IACtH,QAAQ,EAAE,UAAU;IACpB,SAAS,EAAE,KAAK;IAChB,gBAAgB,EAAE,KAAK;IACvB,gBAAgB,EAAE,KAAK;IACvB,gBAAgB,EAAE,MAAM,EAAE,iDAAiD;IAC3E,UAAU,EAAE,CAAC;IACb,OAAO,EAAE,yBAAyB;IAClC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC1B,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;QAE7B,qDAAqD;QACrD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC;CACF,CAAC;AAEF,eAAe,qBAAqB,CAAC"}

package/dist/security/incident/actions/index.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Incident Response Actions
+ *
+ * Collection of automated actions for incident response playbooks.
+ * Each action provides execute, validate, and optional rollback capabilities.
+ *
+ * @packageDocumentation
+ * @module security/incident/actions
+ */
+export { isolateSystemAction, setIsolationService, getIsolationService } from './isolate-system.js';
+export type { IsolationService, IsolationTarget, IsolationResult } from './isolate-system.js';
+export { revokeCredentialsAction, setCredentialService, getCredentialService } from './revoke-credentials.js';
+export type { CredentialService, CredentialTarget, RevocationResult } from './revoke-credentials.js';
+export { blockIpAction, setIpBlockingService, getIpBlockingService } from './block-ip.js';
+export type { IpBlockingService, IpBlockTarget, IpBlockResult } from './block-ip.js';
+export { notifyStakeholdersAction, setStakeholderNotificationService, getStakeholderNotificationService } from './notify-stakeholders.js';
+export type { StakeholderNotificationService, StakeholderNotification, StakeholderConfig } from './notify-stakeholders.js';
+export { collectEvidenceAction, setEvidenceCollectionService, getEvidenceCollectionService } from './collect-evidence.js';
+export type { EvidenceCollectionService, EvidenceTarget, CollectionResult } from './collect-evidence.js';
+export { scaleMonitoringAction, setMonitoringScalingService, getMonitoringScalingService } from './scale-monitoring.js';
+export type { MonitoringScalingService, MonitoringEnhancement } from './scale-monitoring.js';
+import type { ActionDefinition } from '../types.js';
+/**
+ * Registry of all built-in actions
+ */
+export declare const builtInActions: ActionDefinition[];
+/**
+ * Get action by ID
+ */
+export declare function getBuiltInAction(actionId: string): ActionDefinition | undefined;
+/**
+ * Get all actions by category
+ */
+export declare function getActionsByCategory(category: ActionDefinition['category']): ActionDefinition[];
+/**
+ * Get all action IDs
+ */
+export declare function getActionIds(): string[];
+//# sourceMappingURL=index.d.ts.map

package/dist/security/incident/actions/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/security/incident/actions/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AACpG,YAAY,EAAE,gBAAgB,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE9F,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC9G,YAAY,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAErG,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAC1F,YAAY,EAAE,iBAAiB,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAErF,OAAO,EAAE,wBAAwB,EAAE,iCAAiC,EAAE,iCAAiC,EAAE,MAAM,0BAA0B,CAAC;AAC1I,YAAY,EAAE,8BAA8B,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE3H,OAAO,EAAE,qBAAqB,EAAE,4BAA4B,EAAE,4BAA4B,EAAE,MAAM,uBAAuB,CAAC;AAC1H,YAAY,EAAE,yBAAyB,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEzG,OAAO,EAAE,qBAAqB,EAAE,2BAA2B,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AACxH,YAAY,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAE7F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAQpD;;GAEG;AACH,eAAO,MAAM,cAAc,EAAE,gBAAgB,EAO5C,CAAC;AAEF;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAE/E;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,gBAAgB,CAAC,UAAU,CAAC,GAAG,gBAAgB,EAAE,CAE/F;AAED;;GAEG;AACH,wBAAgB,YAAY,IAAI,MAAM,EAAE,CAEvC"}