@x12i/memorix-retrieval 1.1.0

package/catalox-seeds/memorix-retrieval-descriptors.manifest.json

@@ -0,0 +1,1844 @@
+{
+  "presetVersion": 1,
+  "id": "memorix-retrieval-descriptors",
+  "name": "Memorix retrieval descriptors",
+  "description": "Entity, list, and item descriptors for @x12i/memorix-retrieval (from catalox-seeds/inputs/). assets and variabilities-groups target memorix-entities; vulnerabilities target memorix-events. All items share scope.domains/network+vulnerabilities and scope.agents/neo.",
+  "catalogs": [
+    {
+      "catalogId": "memorix-entity-descriptors",
+      "name": "Memorix entity descriptors",
+      "catalogType": "memorix",
+      "sourceMode": "native",
+      "native": {
+        "itemIdField": "id",
+        "titleField": "entityName"
+      }
+    },
+    {
+      "catalogId": "memorix-list-descriptors",
+      "name": "Memorix list descriptors",
+      "catalogType": "memorix",
+      "sourceMode": "native",
+      "native": {
+        "itemIdField": "id",
+        "titleField": "title"
+      }
+    },
+    {
+      "catalogId": "memorix-item-descriptors",
+      "name": "Memorix item descriptors",
+      "catalogType": "memorix",
+      "sourceMode": "native",
+      "native": {
+        "itemIdField": "id",
+        "titleField": "title"
+      }
+    }
+  ],
+  "descriptors": [
+    {
+      "catalogId": "memorix-entity-descriptors",
+      "descriptorVersion": "1",
+      "mode": "replace",
+      "descriptor": {
+        "catalogId": "memorix-entity-descriptors",
+        "label": "Memorix entity descriptors",
+        "sourceMode": "native",
+        "status": "active",
+        "capabilities": {
+          "canList": true,
+          "canGet": true,
+          "canCreate": true,
+          "canEdit": true,
+          "canDelete": true,
+          "canImport": true,
+          "canExport": true,
+          "canSync": false,
+          "canValidate": true,
+          "canViewReferences": true
+        },
+        "queryableFields": [
+          {
+            "key": "id",
+            "label": "Id",
+            "type": "string",
+            "indexed": true,
+            "filterable": true,
+            "listVisible": true,
+            "detailVisible": true
+          },
+          {
+            "key": "entityName",
+            "label": "Entity name",
+            "type": "string",
+            "indexed": true,
+            "filterable": true,
+            "listVisible": true,
+            "detailVisible": true
+          },
+          {
+            "key": "target",
+            "label": "Target",
+            "type": "string",
+            "indexed": true,
+            "filterable": true,
+            "listVisible": true,
+            "detailVisible": true
+          }
+        ],
+        "identity": {
+          "itemIdStrategy": "natural",
+          "itemIdField": "id",
+          "titleField": "entityName"
+        }
+      }
+    },
+    {
+      "catalogId": "memorix-list-descriptors",
+      "descriptorVersion": "1",
+      "mode": "replace",
+      "descriptor": {
+        "catalogId": "memorix-list-descriptors",
+        "label": "Memorix list descriptors",
+        "sourceMode": "native",
+        "status": "active",
+        "capabilities": {
+          "canList": true,
+          "canGet": true,
+          "canCreate": true,
+          "canEdit": true,
+          "canDelete": true,
+          "canImport": true,
+          "canExport": true,
+          "canSync": false,
+          "canValidate": true,
+          "canViewReferences": true
+        },
+        "queryableFields": [
+          {
+            "key": "id",
+            "label": "Id",
+            "type": "string",
+            "indexed": true,
+            "filterable": true,
+            "listVisible": true,
+            "detailVisible": true
+          },
+          {
+            "key": "entity",
+            "label": "Entity",
+            "type": "string",
+            "indexed": true,
+            "filterable": true,
+            "listVisible": true,
+            "detailVisible": true
+          },
+          {
+            "key": "title",
+            "label": "Title",
+            "type": "string",
+            "indexed": true,
+            "filterable": true,
+            "listVisible": true,
+            "detailVisible": true
+          }
+        ],
+        "identity": {
+          "itemIdStrategy": "natural",
+          "itemIdField": "id",
+          "titleField": "title"
+        }
+      }
+    },
+    {
+      "catalogId": "memorix-item-descriptors",
+      "descriptorVersion": "1",
+      "mode": "replace",
+      "descriptor": {
+        "catalogId": "memorix-item-descriptors",
+        "label": "Memorix item descriptors",
+        "sourceMode": "native",
+        "status": "active",
+        "capabilities": {
+          "canList": true,
+          "canGet": true,
+          "canCreate": true,
+          "canEdit": true,
+          "canDelete": true,
+          "canImport": true,
+          "canExport": true,
+          "canSync": false,
+          "canValidate": true,
+          "canViewReferences": true
+        },
+        "queryableFields": [
+          {
+            "key": "id",
+            "label": "Id",
+            "type": "string",
+            "indexed": true,
+            "filterable": true,
+            "listVisible": true,
+            "detailVisible": true
+          },
+          {
+            "key": "entity",
+            "label": "Entity",
+            "type": "string",
+            "indexed": true,
+            "filterable": true,
+            "listVisible": true,
+            "detailVisible": true
+          },
+          {
+            "key": "title",
+            "label": "Title",
+            "type": "string",
+            "indexed": true,
+            "filterable": true,
+            "listVisible": true,
+            "detailVisible": true
+          }
+        ],
+        "identity": {
+          "itemIdStrategy": "natural",
+          "itemIdField": "id",
+          "titleField": "title"
+        }
+      }
+    }
+  ],
+  "bindings": [
+    {
+      "appId": "memorix",
+      "catalogId": "memorix-entity-descriptors",
+      "access": {
+        "canRead": true,
+        "canWrite": true
+      }
+    },
+    {
+      "appId": "memorix",
+      "catalogId": "memorix-list-descriptors",
+      "access": {
+        "canRead": true,
+        "canWrite": true
+      }
+    },
+    {
+      "appId": "memorix",
+      "catalogId": "memorix-item-descriptors",
+      "access": {
+        "canRead": true,
+        "canWrite": true
+      }
+    }
+  ],
+  "items": [
+    {
+      "catalogId": "memorix-entity-descriptors",
+      "scope": {
+        "domains": [
+          "network",
+          "vulnerabilities"
+        ],
+        "agents": [
+          "neo"
+        ]
+      },
+      "data": {
+        "id": "assets",
+        "entityName": "assets",
+        "target": "entity",
+        "collectionPrefix": "assets",
+        "identity": {
+          "allowedIdFields": [
+            "entityId",
+            "eventId"
+          ],
+          "requiredExactlyOne": true,
+          "defaultIdField": "entityId"
+        },
+        "defaults": {
+          "canonicalContentType": "snapshots",
+          "dataRoot": "data",
+          "effectiveDatePath": "capturedAt",
+          "fallbackEffectiveDatePaths": [
+            "snapshot.capturedAt",
+            "data.xdr.last_seen"
+          ]
+        },
+        "contentTypes": {
+          "snapshots": {
+            "postfix": "snapshots",
+            "collection": "assets-snapshots",
+            "dataRoot": "data",
+            "isCanonical": true,
+            "effectiveDatePath": "capturedAt",
+            "fallbackEffectiveDatePaths": [
+              "snapshot.capturedAt",
+              "data.xdr.last_seen"
+            ]
+          }
+        },
+        "properties": {
+          "ipAddress": {
+            "label": "IP Address",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.ip_address"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "string"
+          },
+          "source": {
+            "label": "Source",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data._source"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "string"
+          },
+          "hostName": {
+            "label": "Host Name",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.xdr.host_name"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "string"
+          },
+          "xdrOperationalStatus": {
+            "label": "XDR Operational Status",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.xdr.operational_status"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "string"
+          },
+          "xdrAgentStatus": {
+            "label": "XDR Agent Status",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.xdr.agent_status"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "string"
+          },
+          "agentType": {
+            "label": "Agent Type",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.xdr.agent_type"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "string"
+          },
+          "lastSeen": {
+            "label": "Last Seen",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.xdr.last_seen"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "datetime"
+          },
+          "users": {
+            "label": "Users",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.xdr.users"
+            },
+            "humanReadable": true,
+            "sortable": false,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "array"
+          },
+          "hasVulnerabilities": {
+            "label": "Has Vulnerabilities",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.vulnerabilities.hasVulnerabilities"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "boolean"
+          },
+          "criticalVulnerabilities": {
+            "label": "Critical Vulnerabilities",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.vulnerabilities.count.critical"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "number"
+          },
+          "highVulnerabilities": {
+            "label": "High Vulnerabilities",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.vulnerabilities.count.high"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "number"
+          },
+          "mediumVulnerabilities": {
+            "label": "Medium Vulnerabilities",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.vulnerabilities.count.medium"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "number"
+          },
+          "lowVulnerabilities": {
+            "label": "Low Vulnerabilities",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.vulnerabilities.count.low"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "number"
+          },
+          "potentialImpactLevel": {
+            "label": "Potential Impact",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.potentialImpact.level"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "string"
+          },
+          "potentialImpactConfidence": {
+            "label": "Impact Confidence",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.potentialImpact.confidence"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "number"
+          },
+          "potentialImpactStory": {
+            "label": "Potential Impact Story",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.potentialImpact.story"
+            },
+            "humanReadable": false,
+            "sortable": false,
+            "filterable": false,
+            "list": false,
+            "item": true,
+            "valueType": "array"
+          },
+          "pathsCount": {
+            "label": "Paths Count",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.pathsCount"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "number"
+          },
+          "rawXdr": {
+            "label": "Raw XDR",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.xdr"
+            },
+            "humanReadable": false,
+            "sortable": false,
+            "filterable": false,
+            "list": false,
+            "item": true,
+            "valueType": "object"
+          }
+        },
+        "relations": {
+          "assetVulnerabilities": {
+            "targetEntity": "vulnerabilities",
+            "type": "oneToMany",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.ip_address"
+            },
+            "target": {
+              "contentType": "snapshots",
+              "path": "data.assetIp"
+            },
+            "defaultMode": "array",
+            "defaultArrayProperty": "vulnerabilities",
+            "targetFields": [
+              "vulnerabilityId",
+              "pluginName",
+              "severityLevel",
+              "riskLevel",
+              "priorityScore",
+              "cveIds"
+            ]
+          }
+        }
+      }
+    },
+    {
+      "catalogId": "memorix-entity-descriptors",
+      "scope": {
+        "domains": [
+          "network",
+          "vulnerabilities"
+        ],
+        "agents": [
+          "neo"
+        ]
+      },
+      "data": {
+        "id": "variabilities-groups",
+        "entityName": "variabilities-groups",
+        "target": "entity",
+        "collectionPrefix": "variabilities-groups",
+        "identity": {
+          "allowedIdFields": [
+            "entityId",
+            "eventId"
+          ],
+          "requiredExactlyOne": true,
+          "defaultIdField": "entityId"
+        },
+        "defaults": {
+          "canonicalContentType": "snapshots",
+          "dataRoot": "data",
+          "effectiveDatePath": "capturedAt",
+          "fallbackEffectiveDatePaths": [
+            "snapshot.capturedAt",
+            "data.enrichedAt",
+            "data.enrichment.enrichedAt"
+          ]
+        },
+        "contentTypes": {
+          "snapshots": {
+            "postfix": "snapshots",
+            "collection": "variabilities-groups-snapshots",
+            "dataRoot": "data",
+            "isCanonical": true,
+            "effectiveDatePath": "capturedAt",
+            "fallbackEffectiveDatePaths": [
+              "snapshot.capturedAt",
+              "data.enrichedAt",
+              "data.enrichment.enrichedAt"
+            ]
+          }
+        },
+        "properties": {
+          "groupId": {
+            "label": "Group ID",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.id"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "string"
+          },
+          "type": {
+            "label": "Type",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.type"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "string"
+          },
+          "pluginId": {
+            "label": "Plugin ID",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.plugin_id"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "number"
+          },
+          "pluginName": {
+            "label": "Plugin Name",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.plugin_name"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "string"
+          },
+          "pluginFamily": {
+            "label": "Plugin Family",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.plugin_family"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "string"
+          },
+          "severity": {
+            "label": "Severity",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.severity"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "string"
+          },
+          "severityLevel": {
+            "label": "Severity Level",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.severity_level"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "number"
+          },
+          "affectedEntities": {
+            "label": "Affected Entities",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.affected_entities"
+            },
+            "humanReadable": true,
+            "sortable": false,
+            "filterable": true,
+            "list": false,
+            "item": true,
+            "valueType": "array"
+          },
+          "affectedEntitiesCount": {
+            "label": "Affected Entities Count",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.affected_entities"
+            },
+            "humanReadable": true,
+            "sortable": false,
+            "filterable": false,
+            "list": true,
+            "item": true,
+            "valueType": "array",
+            "format": "count"
+          },
+          "source": {
+            "label": "Source",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.source"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": false,
+            "item": true,
+            "valueType": "string"
+          },
+          "cveIds": {
+            "label": "CVEs",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.cveIds"
+            },
+            "humanReadable": true,
+            "sortable": false,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "array"
+          },
+          "riskLevel": {
+            "label": "Risk Level",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.enrichment.riskLevel"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "string"
+          },
+          "priorityScore": {
+            "label": "Priority Score",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.enrichment.priorityScore"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "number"
+          },
+          "compositeScore": {
+            "label": "Composite Score",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.enrichment.compositeScore"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "number"
+          },
+          "epss": {
+            "label": "EPSS",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.enrichment.epss.epss"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "number"
+          },
+          "knownExploited": {
+            "label": "Known Exploited",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.enrichment.kev.isKnownExploited"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "boolean"
+          },
+          "cvssBaseScore": {
+            "label": "CVSS Base Score",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.enrichment.cvss.baseScore"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "number"
+          },
+          "cvssVector": {
+            "label": "CVSS Vector",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.enrichment.cvss.cvssVector"
+            },
+            "humanReadable": true,
+            "sortable": false,
+            "filterable": true,
+            "list": false,
+            "item": true,
+            "valueType": "string"
+          },
+          "enrichedAt": {
+            "label": "Enriched At",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.enrichedAt"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": false,
+            "item": true,
+            "valueType": "datetime"
+          }
+        },
+        "relations": {
+          "groupVulnerabilities": {
+            "targetEntity": "vulnerabilities",
+            "type": "oneToMany",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.plugin_id"
+            },
+            "target": {
+              "contentType": "snapshots",
+              "path": "data.pluginId"
+            },
+            "defaultMode": "array",
+            "defaultArrayProperty": "vulnerabilities",
+            "targetFields": [
+              "vulnerabilityId",
+              "assetIp",
+              "pluginName",
+              "severityLevel",
+              "riskLevel",
+              "priorityScore"
+            ]
+          }
+        }
+      }
+    },
+    {
+      "catalogId": "memorix-entity-descriptors",
+      "scope": {
+        "domains": [
+          "network",
+          "vulnerabilities"
+        ],
+        "agents": [
+          "neo"
+        ]
+      },
+      "data": {
+        "id": "vulnerabilities",
+        "entityName": "vulnerabilities",
+        "target": "event",
+        "collectionPrefix": "vulnerabilities",
+        "identity": {
+          "allowedIdFields": [
+            "entityId",
+            "eventId"
+          ],
+          "requiredExactlyOne": true,
+          "defaultIdField": "entityId"
+        },
+        "defaults": {
+          "canonicalContentType": "snapshots",
+          "dataRoot": "data",
+          "effectiveDatePath": "capturedAt",
+          "fallbackEffectiveDatePaths": [
+            "snapshot.capturedAt",
+            "data.enrichment.enrichedAt"
+          ]
+        },
+        "contentTypes": {
+          "snapshots": {
+            "postfix": "snapshots",
+            "collection": "vulnerabilities-snapshots",
+            "dataRoot": "data",
+            "isCanonical": true,
+            "effectiveDatePath": "capturedAt",
+            "fallbackEffectiveDatePaths": [
+              "snapshot.capturedAt",
+              "data.enrichment.enrichedAt"
+            ]
+          }
+        },
+        "properties": {
+          "vulnerabilityId": {
+            "label": "Vulnerability ID",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.vulnerabilityId"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "string"
+          },
+          "assetIp": {
+            "label": "Asset IP",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.assetIp"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "string"
+          },
+          "assetType": {
+            "label": "Asset Type",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.assetType"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "string"
+          },
+          "assetZone": {
+            "label": "Asset Zone",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.assetZone"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "string"
+          },
+          "assetHostname": {
+            "label": "Asset Hostname",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.assetHostname"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "string"
+          },
+          "pluginId": {
+            "label": "Plugin ID",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.pluginId"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "number"
+          },
+          "pluginName": {
+            "label": "Plugin Name",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.pluginName"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "string"
+          },
+          "pluginFamily": {
+            "label": "Plugin Family",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.pluginFamily"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "string"
+          },
+          "severity": {
+            "label": "Severity",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.severity"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "string"
+          },
+          "severityLevel": {
+            "label": "Severity Level",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.severityLevel"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "number"
+          },
+          "cveIds": {
+            "label": "CVEs",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.cveIds"
+            },
+            "humanReadable": true,
+            "sortable": false,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "array"
+          },
+          "riskLevel": {
+            "label": "Risk Level",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.enrichment.riskLevel"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "string"
+          },
+          "priorityScore": {
+            "label": "Priority Score",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.enrichment.priorityScore"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "number"
+          },
+          "compositeScore": {
+            "label": "Composite Score",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.enrichment.compositeScore"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "number"
+          },
+          "epss": {
+            "label": "EPSS",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.enrichment.epss.epss"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "number"
+          },
+          "epssPercentile": {
+            "label": "EPSS Percentile",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.enrichment.epss.percentile"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "number"
+          },
+          "knownExploited": {
+            "label": "Known Exploited",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.enrichment.kev.isKnownExploited"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "boolean"
+          },
+          "cvssBaseScore": {
+            "label": "CVSS Base Score",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.enrichment.cvss.baseScore"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "number"
+          },
+          "cvssVector": {
+            "label": "CVSS Vector",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.enrichment.cvss.cvssVector"
+            },
+            "humanReadable": true,
+            "sortable": false,
+            "filterable": true,
+            "list": false,
+            "item": true,
+            "valueType": "string"
+          },
+          "exploitabilityScore": {
+            "label": "Exploitability Score",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.exploitabilityScore"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "number"
+          },
+          "exploitabilityLevel": {
+            "label": "Exploitability Level",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.exploitabilityLevel"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "string"
+          },
+          "assetMatched": {
+            "label": "Asset Matched",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.assetMatched"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": false,
+            "item": true,
+            "valueType": "boolean"
+          },
+          "networkExposure": {
+            "label": "Network Exposure",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.mitreAnalysis.networkContext.exposure"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "string"
+          },
+          "attackPathCount": {
+            "label": "Attack Path Count",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.mitreAnalysis.networkContext.paths.paths"
+            },
+            "humanReadable": true,
+            "sortable": false,
+            "filterable": false,
+            "list": false,
+            "item": true,
+            "valueType": "array"
+          },
+          "mitreTechniques": {
+            "label": "MITRE Techniques",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.mitreAnalysis.techniques"
+            },
+            "humanReadable": true,
+            "sortable": false,
+            "filterable": true,
+            "list": false,
+            "item": true,
+            "valueType": "array"
+          },
+          "mitreAnalysis": {
+            "label": "MITRE Analysis",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.mitreAnalysis"
+            },
+            "humanReadable": false,
+            "sortable": false,
+            "filterable": false,
+            "list": false,
+            "item": true,
+            "valueType": "object"
+          }
+        },
+        "relations": {
+          "affectedAsset": {
+            "targetEntity": "assets",
+            "type": "manyToOne",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.assetIp"
+            },
+            "target": {
+              "contentType": "snapshots",
+              "path": "data.ip_address"
+            },
+            "defaultMode": "extendFields",
+            "targetFields": [
+              "ipAddress",
+              "hostName",
+              "xdrOperationalStatus",
+              "xdrAgentStatus",
+              "potentialImpactLevel"
+            ]
+          },
+          "vulnerabilityGroup": {
+            "targetEntity": "variabilities-groups",
+            "type": "manyToOne",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.pluginId"
+            },
+            "target": {
+              "contentType": "snapshots",
+              "path": "data.plugin_id"
+            },
+            "defaultMode": "extendFields",
+            "targetFields": [
+              "groupId",
+              "pluginName",
+              "severityLevel",
+              "affectedEntitiesCount",
+              "riskLevel",
+              "priorityScore"
+            ]
+          }
+        }
+      }
+    },
+    {
+      "catalogId": "memorix-list-descriptors",
+      "scope": {
+        "domains": [
+          "network",
+          "vulnerabilities"
+        ],
+        "agents": [
+          "neo"
+        ]
+      },
+      "data": {
+        "id": "assets-main-list",
+        "entity": "assets",
+        "title": "Assets",
+        "leadingContentType": "snapshots",
+        "pagination": {
+          "enabled": true,
+          "defaultLimit": 50,
+          "maxLimit": 200
+        },
+        "filters": [],
+        "fields": [
+          "ipAddress",
+          "hostName",
+          "source",
+          "agentType",
+          "xdrOperationalStatus",
+          "xdrAgentStatus",
+          "hasVulnerabilities",
+          "criticalVulnerabilities",
+          "highVulnerabilities",
+          "potentialImpactLevel",
+          "pathsCount"
+        ],
+        "extensions": [],
+        "includeRelations": [],
+        "allowedSorts": [
+          "ipAddress",
+          "hostName",
+          "source",
+          "agentType",
+          "xdrOperationalStatus",
+          "xdrAgentStatus",
+          "hasVulnerabilities",
+          "criticalVulnerabilities",
+          "highVulnerabilities",
+          "potentialImpactLevel",
+          "pathsCount",
+          "lastSeen"
+        ],
+        "defaultSort": {
+          "property": "ipAddress",
+          "direction": "asc"
+        },
+        "allowSortDrivenLeadingOverride": false
+      }
+    },
+    {
+      "catalogId": "memorix-list-descriptors",
+      "scope": {
+        "domains": [
+          "network",
+          "vulnerabilities"
+        ],
+        "agents": [
+          "neo"
+        ]
+      },
+      "data": {
+        "id": "vulnerabilities-main-list",
+        "entity": "vulnerabilities",
+        "title": "Vulnerabilities",
+        "leadingContentType": "snapshots",
+        "pagination": {
+          "enabled": true,
+          "defaultLimit": 50,
+          "maxLimit": 200
+        },
+        "filters": [],
+        "fields": [
+          "vulnerabilityId",
+          "assetIp",
+          "pluginName",
+          "pluginFamily",
+          "severityLevel",
+          "cveIds",
+          "riskLevel",
+          "priorityScore",
+          "epss",
+          "knownExploited",
+          "exploitabilityLevel",
+          "networkExposure"
+        ],
+        "extensions": [],
+        "includeRelations": [],
+        "allowedSorts": [
+          "vulnerabilityId",
+          "assetIp",
+          "pluginName",
+          "pluginFamily",
+          "severityLevel",
+          "riskLevel",
+          "priorityScore",
+          "epss",
+          "knownExploited",
+          "exploitabilityScore",
+          "exploitabilityLevel",
+          "networkExposure"
+        ],
+        "defaultSort": {
+          "property": "priorityScore",
+          "direction": "desc"
+        },
+        "allowSortDrivenLeadingOverride": false
+      }
+    },
+    {
+      "catalogId": "memorix-list-descriptors",
+      "scope": {
+        "domains": [
+          "network",
+          "vulnerabilities"
+        ],
+        "agents": [
+          "neo"
+        ]
+      },
+      "data": {
+        "id": "critical-vulnerabilities-list",
+        "entity": "vulnerabilities",
+        "title": "Critical Vulnerabilities",
+        "leadingContentType": "snapshots",
+        "pagination": {
+          "enabled": true,
+          "defaultLimit": 50,
+          "maxLimit": 200
+        },
+        "filters": [
+          {
+            "property": "severityLevel",
+            "operator": "gte",
+            "value": 4
+          }
+        ],
+        "fields": [
+          "vulnerabilityId",
+          "assetIp",
+          "pluginName",
+          "severityLevel",
+          "riskLevel",
+          "priorityScore",
+          "epss",
+          "knownExploited",
+          "exploitabilityLevel"
+        ],
+        "extensions": [],
+        "includeRelations": [],
+        "allowedSorts": [
+          "severityLevel",
+          "riskLevel",
+          "priorityScore",
+          "epss",
+          "knownExploited",
+          "exploitabilityScore"
+        ],
+        "defaultSort": {
+          "property": "priorityScore",
+          "direction": "desc"
+        },
+        "allowSortDrivenLeadingOverride": false
+      }
+    },
+    {
+      "catalogId": "memorix-list-descriptors",
+      "scope": {
+        "domains": [
+          "network",
+          "vulnerabilities"
+        ],
+        "agents": [
+          "neo"
+        ]
+      },
+      "data": {
+        "id": "variabilities-groups-main-list",
+        "entity": "variabilities-groups",
+        "title": "Vulnerability Groups",
+        "leadingContentType": "snapshots",
+        "pagination": {
+          "enabled": true,
+          "defaultLimit": 50,
+          "maxLimit": 200
+        },
+        "filters": [],
+        "fields": [
+          "groupId",
+          "pluginName",
+          "pluginFamily",
+          "severityLevel",
+          "affectedEntitiesCount",
+          "cveIds",
+          "riskLevel",
+          "priorityScore",
+          "epss",
+          "knownExploited"
+        ],
+        "extensions": [],
+        "includeRelations": [],
+        "allowedSorts": [
+          "groupId",
+          "pluginId",
+          "pluginName",
+          "pluginFamily",
+          "severityLevel",
+          "riskLevel",
+          "priorityScore",
+          "epss",
+          "knownExploited",
+          "cvssBaseScore"
+        ],
+        "defaultSort": {
+          "property": "priorityScore",
+          "direction": "desc"
+        },
+        "allowSortDrivenLeadingOverride": false
+      }
+    },
+    {
+      "catalogId": "memorix-item-descriptors",
+      "scope": {
+        "domains": [
+          "network",
+          "vulnerabilities"
+        ],
+        "agents": [
+          "neo"
+        ]
+      },
+      "data": {
+        "id": "asset-detail-item",
+        "entity": "assets",
+        "title": "Asset Detail",
+        "identity": {
+          "idField": "entityId"
+        },
+        "contentTypes": [
+          {
+            "contentType": "snapshots",
+            "required": true,
+            "multiMatch": {
+              "strategy": "last",
+              "effectiveDatePath": "capturedAt",
+              "fallbackEffectiveDatePaths": [
+                "snapshot.capturedAt",
+                "data.xdr.last_seen"
+              ]
+            }
+          }
+        ],
+        "sections": [
+          {
+            "id": "summary",
+            "title": "Summary",
+            "fields": [
+              "ipAddress",
+              "hostName",
+              "source",
+              "agentType",
+              "xdrOperationalStatus",
+              "xdrAgentStatus",
+              "lastSeen",
+              "pathsCount"
+            ]
+          },
+          {
+            "id": "vulnerabilitySummary",
+            "title": "Vulnerability Summary",
+            "fields": [
+              "hasVulnerabilities",
+              "criticalVulnerabilities",
+              "highVulnerabilities",
+              "mediumVulnerabilities",
+              "lowVulnerabilities"
+            ]
+          },
+          {
+            "id": "impact",
+            "title": "Potential Impact",
+            "fields": [
+              "potentialImpactLevel",
+              "potentialImpactConfidence",
+              "potentialImpactStory"
+            ]
+          },
+          {
+            "id": "xdr",
+            "title": "XDR",
+            "fields": [
+              "users",
+              "rawXdr"
+            ]
+          }
+        ],
+        "includeRelations": [
+          {
+            "relation": "assetVulnerabilities",
+            "mode": "array",
+            "arrayProperty": "vulnerabilities",
+            "limit": 100,
+            "fields": [
+              "vulnerabilityId",
+              "pluginName",
+              "severityLevel",
+              "riskLevel",
+              "priorityScore",
+              "cveIds"
+            ]
+          }
+        ],
+        "content": {
+          "allowed": false
+        }
+      }
+    },
+    {
+      "catalogId": "memorix-item-descriptors",
+      "scope": {
+        "domains": [
+          "network",
+          "vulnerabilities"
+        ],
+        "agents": [
+          "neo"
+        ]
+      },
+      "data": {
+        "id": "vulnerability-detail-item",
+        "entity": "vulnerabilities",
+        "title": "Vulnerability Detail",
+        "identity": {
+          "idField": "entityId"
+        },
+        "contentTypes": [
+          {
+            "contentType": "snapshots",
+            "required": true,
+            "multiMatch": {
+              "strategy": "last",
+              "effectiveDatePath": "capturedAt",
+              "fallbackEffectiveDatePaths": [
+                "snapshot.capturedAt",
+                "data.enrichment.enrichedAt"
+              ]
+            }
+          }
+        ],
+        "sections": [
+          {
+            "id": "summary",
+            "title": "Summary",
+            "fields": [
+              "vulnerabilityId",
+              "pluginName",
+              "pluginFamily",
+              "severity",
+              "severityLevel",
+              "cveIds"
+            ]
+          },
+          {
+            "id": "asset",
+            "title": "Affected Asset",
+            "fields": [
+              "assetIp",
+              "assetType",
+              "assetZone",
+              "assetHostname",
+              "assetMatched"
+            ]
+          },
+          {
+            "id": "risk",
+            "title": "Risk",
+            "fields": [
+              "riskLevel",
+              "priorityScore",
+              "compositeScore",
+              "exploitabilityScore",
+              "exploitabilityLevel"
+            ]
+          },
+          {
+            "id": "threatIntelligence",
+            "title": "Threat Intelligence",
+            "fields": [
+              "epss",
+              "epssPercentile",
+              "knownExploited",
+              "cvssBaseScore",
+              "cvssVector"
+            ]
+          },
+          {
+            "id": "networkAndMitre",
+            "title": "Network & MITRE",
+            "fields": [
+              "networkExposure",
+              "mitreTechniques",
+              "mitreAnalysis"
+            ]
+          }
+        ],
+        "includeRelations": [
+          {
+            "relation": "affectedAsset",
+            "mode": "extendFields",
+            "fields": [
+              "ipAddress",
+              "hostName",
+              "xdrOperationalStatus",
+              "xdrAgentStatus",
+              "potentialImpactLevel"
+            ]
+          },
+          {
+            "relation": "vulnerabilityGroup",
+            "mode": "extendFields",
+            "fields": [
+              "groupId",
+              "pluginName",
+              "severityLevel",
+              "affectedEntitiesCount",
+              "riskLevel",
+              "priorityScore"
+            ]
+          }
+        ],
+        "content": {
+          "allowed": false
+        }
+      }
+    },
+    {
+      "catalogId": "memorix-item-descriptors",
+      "scope": {
+        "domains": [
+          "network",
+          "vulnerabilities"
+        ],
+        "agents": [
+          "neo"
+        ]
+      },
+      "data": {
+        "id": "variabilities-group-detail-item",
+        "entity": "variabilities-groups",
+        "title": "Vulnerability Group Detail",
+        "identity": {
+          "idField": "entityId"
+        },
+        "contentTypes": [
+          {
+            "contentType": "snapshots",
+            "required": true,
+            "multiMatch": {
+              "strategy": "last",
+              "effectiveDatePath": "capturedAt",
+              "fallbackEffectiveDatePaths": [
+                "snapshot.capturedAt",
+                "data.enrichedAt",
+                "data.enrichment.enrichedAt"
+              ]
+            }
+          }
+        ],
+        "sections": [
+          {
+            "id": "summary",
+            "title": "Summary",
+            "fields": [
+              "groupId",
+              "type",
+              "pluginId",
+              "pluginName",
+              "pluginFamily",
+              "severity",
+              "severityLevel",
+              "cveIds",
+              "source"
+            ]
+          },
+          {
+            "id": "affectedEntities",
+            "title": "Affected Entities",
+            "fields": [
+              "affectedEntities",
+              "affectedEntitiesCount"
+            ]
+          },
+          {
+            "id": "risk",
+            "title": "Risk",
+            "fields": [
+              "riskLevel",
+              "priorityScore",
+              "compositeScore"
+            ]
+          },
+          {
+            "id": "threatIntelligence",
+            "title": "Threat Intelligence",
+            "fields": [
+              "epss",
+              "knownExploited",
+              "cvssBaseScore",
+              "cvssVector",
+              "enrichedAt"
+            ]
+          }
+        ],
+        "includeRelations": [
+          {
+            "relation": "groupVulnerabilities",
+            "mode": "array",
+            "arrayProperty": "vulnerabilities",
+            "limit": 200,
+            "fields": [
+              "vulnerabilityId",
+              "assetIp",
+              "pluginName",
+              "severityLevel",
+              "riskLevel",
+              "priorityScore"
+            ]
+          }
+        ],
+        "content": {
+          "allowed": false
+        }
+      }
+    }
+  ]
+}