@x12i/memorix-retrieval 1.1.0

package/catalox-seeds/inputs/memorix-descriptors.bundle.json

@@ -0,0 +1,1502 @@
+{
+  "appId": "memorix",
+  "catalogs": {
+    "entityDescriptors": {
+      "catalogId": "memorix-entity-descriptors",
+      "items": [
+        {
+          "id": "assets",
+          "entityName": "assets",
+          "collectionPrefix": "assets",
+          "identity": {
+            "allowedIdFields": [
+              "entityId",
+              "eventId"
+            ],
+            "requiredExactlyOne": true,
+            "defaultIdField": "entityId"
+          },
+          "defaults": {
+            "canonicalContentType": "snapshots",
+            "dataRoot": "data",
+            "effectiveDatePath": "capturedAt",
+            "fallbackEffectiveDatePaths": [
+              "snapshot.capturedAt",
+              "data.xdr.last_seen"
+            ]
+          },
+          "contentTypes": {
+            "snapshots": {
+              "postfix": "snapshots",
+              "collection": "assets-snapshots",
+              "dataRoot": "data",
+              "isCanonical": true,
+              "effectiveDatePath": "capturedAt",
+              "fallbackEffectiveDatePaths": [
+                "snapshot.capturedAt",
+                "data.xdr.last_seen"
+              ]
+            }
+          },
+          "properties": {
+            "ipAddress": {
+              "label": "IP Address",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.ip_address"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "string"
+            },
+            "source": {
+              "label": "Source",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data._source"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "string"
+            },
+            "hostName": {
+              "label": "Host Name",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.xdr.host_name"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "string"
+            },
+            "xdrOperationalStatus": {
+              "label": "XDR Operational Status",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.xdr.operational_status"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "string"
+            },
+            "xdrAgentStatus": {
+              "label": "XDR Agent Status",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.xdr.agent_status"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "string"
+            },
+            "agentType": {
+              "label": "Agent Type",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.xdr.agent_type"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "string"
+            },
+            "lastSeen": {
+              "label": "Last Seen",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.xdr.last_seen"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "datetime"
+            },
+            "users": {
+              "label": "Users",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.xdr.users"
+              },
+              "humanReadable": true,
+              "sortable": false,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "array"
+            },
+            "hasVulnerabilities": {
+              "label": "Has Vulnerabilities",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.vulnerabilities.hasVulnerabilities"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "boolean"
+            },
+            "criticalVulnerabilities": {
+              "label": "Critical Vulnerabilities",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.vulnerabilities.count.critical"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "number"
+            },
+            "highVulnerabilities": {
+              "label": "High Vulnerabilities",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.vulnerabilities.count.high"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "number"
+            },
+            "mediumVulnerabilities": {
+              "label": "Medium Vulnerabilities",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.vulnerabilities.count.medium"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "number"
+            },
+            "lowVulnerabilities": {
+              "label": "Low Vulnerabilities",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.vulnerabilities.count.low"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "number"
+            },
+            "potentialImpactLevel": {
+              "label": "Potential Impact",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.potentialImpact.level"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "string"
+            },
+            "potentialImpactConfidence": {
+              "label": "Impact Confidence",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.potentialImpact.confidence"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "number"
+            },
+            "potentialImpactStory": {
+              "label": "Potential Impact Story",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.potentialImpact.story"
+              },
+              "humanReadable": false,
+              "sortable": false,
+              "filterable": false,
+              "list": false,
+              "item": true,
+              "valueType": "array"
+            },
+            "pathsCount": {
+              "label": "Paths Count",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.pathsCount"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "number"
+            },
+            "rawXdr": {
+              "label": "Raw XDR",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.xdr"
+              },
+              "humanReadable": false,
+              "sortable": false,
+              "filterable": false,
+              "list": false,
+              "item": true,
+              "valueType": "object"
+            }
+          },
+          "relations": {
+            "assetVulnerabilities": {
+              "targetEntity": "vulnerabilities",
+              "type": "oneToMany",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.ip_address"
+              },
+              "target": {
+                "contentType": "snapshots",
+                "path": "data.assetIp"
+              },
+              "defaultMode": "array",
+              "defaultArrayProperty": "vulnerabilities",
+              "targetFields": [
+                "vulnerabilityId",
+                "pluginName",
+                "severityLevel",
+                "riskLevel",
+                "priorityScore",
+                "cveIds"
+              ]
+            }
+          }
+        },
+        {
+          "id": "vulnerabilities",
+          "entityName": "vulnerabilities",
+          "collectionPrefix": "vulnerabilities",
+          "identity": {
+            "allowedIdFields": [
+              "entityId",
+              "eventId"
+            ],
+            "requiredExactlyOne": true,
+            "defaultIdField": "entityId"
+          },
+          "defaults": {
+            "canonicalContentType": "snapshots",
+            "dataRoot": "data",
+            "effectiveDatePath": "capturedAt",
+            "fallbackEffectiveDatePaths": [
+              "snapshot.capturedAt",
+              "data.enrichment.enrichedAt"
+            ]
+          },
+          "contentTypes": {
+            "snapshots": {
+              "postfix": "snapshots",
+              "collection": "vulnerabilities-snapshots",
+              "dataRoot": "data",
+              "isCanonical": true,
+              "effectiveDatePath": "capturedAt",
+              "fallbackEffectiveDatePaths": [
+                "snapshot.capturedAt",
+                "data.enrichment.enrichedAt"
+              ]
+            }
+          },
+          "properties": {
+            "vulnerabilityId": {
+              "label": "Vulnerability ID",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.vulnerabilityId"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "string"
+            },
+            "assetIp": {
+              "label": "Asset IP",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.assetIp"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "string"
+            },
+            "assetType": {
+              "label": "Asset Type",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.assetType"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "string"
+            },
+            "assetZone": {
+              "label": "Asset Zone",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.assetZone"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "string"
+            },
+            "assetHostname": {
+              "label": "Asset Hostname",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.assetHostname"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "string"
+            },
+            "pluginId": {
+              "label": "Plugin ID",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.pluginId"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "number"
+            },
+            "pluginName": {
+              "label": "Plugin Name",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.pluginName"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "string"
+            },
+            "pluginFamily": {
+              "label": "Plugin Family",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.pluginFamily"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "string"
+            },
+            "severity": {
+              "label": "Severity",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.severity"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "string"
+            },
+            "severityLevel": {
+              "label": "Severity Level",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.severityLevel"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "number"
+            },
+            "cveIds": {
+              "label": "CVEs",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.cveIds"
+              },
+              "humanReadable": true,
+              "sortable": false,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "array"
+            },
+            "riskLevel": {
+              "label": "Risk Level",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.enrichment.riskLevel"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "string"
+            },
+            "priorityScore": {
+              "label": "Priority Score",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.enrichment.priorityScore"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "number"
+            },
+            "compositeScore": {
+              "label": "Composite Score",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.enrichment.compositeScore"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "number"
+            },
+            "epss": {
+              "label": "EPSS",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.enrichment.epss.epss"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "number"
+            },
+            "epssPercentile": {
+              "label": "EPSS Percentile",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.enrichment.epss.percentile"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "number"
+            },
+            "knownExploited": {
+              "label": "Known Exploited",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.enrichment.kev.isKnownExploited"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "boolean"
+            },
+            "cvssBaseScore": {
+              "label": "CVSS Base Score",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.enrichment.cvss.baseScore"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "number"
+            },
+            "cvssVector": {
+              "label": "CVSS Vector",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.enrichment.cvss.cvssVector"
+              },
+              "humanReadable": true,
+              "sortable": false,
+              "filterable": true,
+              "list": false,
+              "item": true,
+              "valueType": "string"
+            },
+            "exploitabilityScore": {
+              "label": "Exploitability Score",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.exploitabilityScore"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "number"
+            },
+            "exploitabilityLevel": {
+              "label": "Exploitability Level",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.exploitabilityLevel"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "string"
+            },
+            "assetMatched": {
+              "label": "Asset Matched",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.assetMatched"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": false,
+              "item": true,
+              "valueType": "boolean"
+            },
+            "networkExposure": {
+              "label": "Network Exposure",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.mitreAnalysis.networkContext.exposure"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "string"
+            },
+            "attackPathCount": {
+              "label": "Attack Path Count",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.mitreAnalysis.networkContext.paths.paths"
+              },
+              "humanReadable": true,
+              "sortable": false,
+              "filterable": false,
+              "list": false,
+              "item": true,
+              "valueType": "array"
+            },
+            "mitreTechniques": {
+              "label": "MITRE Techniques",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.mitreAnalysis.techniques"
+              },
+              "humanReadable": true,
+              "sortable": false,
+              "filterable": true,
+              "list": false,
+              "item": true,
+              "valueType": "array"
+            },
+            "mitreAnalysis": {
+              "label": "MITRE Analysis",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.mitreAnalysis"
+              },
+              "humanReadable": false,
+              "sortable": false,
+              "filterable": false,
+              "list": false,
+              "item": true,
+              "valueType": "object"
+            }
+          },
+          "relations": {
+            "affectedAsset": {
+              "targetEntity": "assets",
+              "type": "manyToOne",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.assetIp"
+              },
+              "target": {
+                "contentType": "snapshots",
+                "path": "data.ip_address"
+              },
+              "defaultMode": "extendFields",
+              "targetFields": [
+                "ipAddress",
+                "hostName",
+                "xdrOperationalStatus",
+                "xdrAgentStatus",
+                "potentialImpactLevel"
+              ]
+            },
+            "vulnerabilityGroup": {
+              "targetEntity": "variabilities-groups",
+              "type": "manyToOne",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.pluginId"
+              },
+              "target": {
+                "contentType": "snapshots",
+                "path": "data.plugin_id"
+              },
+              "defaultMode": "extendFields",
+              "targetFields": [
+                "groupId",
+                "pluginName",
+                "severityLevel",
+                "affectedEntitiesCount",
+                "riskLevel",
+                "priorityScore"
+              ]
+            }
+          }
+        },
+        {
+          "id": "variabilities-groups",
+          "entityName": "variabilities-groups",
+          "collectionPrefix": "variabilities-groups",
+          "identity": {
+            "allowedIdFields": [
+              "entityId",
+              "eventId"
+            ],
+            "requiredExactlyOne": true,
+            "defaultIdField": "entityId"
+          },
+          "defaults": {
+            "canonicalContentType": "snapshots",
+            "dataRoot": "data",
+            "effectiveDatePath": "capturedAt",
+            "fallbackEffectiveDatePaths": [
+              "snapshot.capturedAt",
+              "data.enrichedAt",
+              "data.enrichment.enrichedAt"
+            ]
+          },
+          "contentTypes": {
+            "snapshots": {
+              "postfix": "snapshots",
+              "collection": "variabilities-groups-snapshots",
+              "dataRoot": "data",
+              "isCanonical": true,
+              "effectiveDatePath": "capturedAt",
+              "fallbackEffectiveDatePaths": [
+                "snapshot.capturedAt",
+                "data.enrichedAt",
+                "data.enrichment.enrichedAt"
+              ]
+            }
+          },
+          "properties": {
+            "groupId": {
+              "label": "Group ID",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.id"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "string"
+            },
+            "type": {
+              "label": "Type",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.type"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "string"
+            },
+            "pluginId": {
+              "label": "Plugin ID",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.plugin_id"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "number"
+            },
+            "pluginName": {
+              "label": "Plugin Name",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.plugin_name"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "string"
+            },
+            "pluginFamily": {
+              "label": "Plugin Family",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.plugin_family"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "string"
+            },
+            "severity": {
+              "label": "Severity",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.severity"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "string"
+            },
+            "severityLevel": {
+              "label": "Severity Level",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.severity_level"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "number"
+            },
+            "affectedEntities": {
+              "label": "Affected Entities",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.affected_entities"
+              },
+              "humanReadable": true,
+              "sortable": false,
+              "filterable": true,
+              "list": false,
+              "item": true,
+              "valueType": "array"
+            },
+            "affectedEntitiesCount": {
+              "label": "Affected Entities Count",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.affected_entities"
+              },
+              "humanReadable": true,
+              "sortable": false,
+              "filterable": false,
+              "list": true,
+              "item": true,
+              "valueType": "array",
+              "format": "count"
+            },
+            "source": {
+              "label": "Source",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.source"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": false,
+              "item": true,
+              "valueType": "string"
+            },
+            "cveIds": {
+              "label": "CVEs",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.cveIds"
+              },
+              "humanReadable": true,
+              "sortable": false,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "array"
+            },
+            "riskLevel": {
+              "label": "Risk Level",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.enrichment.riskLevel"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "string"
+            },
+            "priorityScore": {
+              "label": "Priority Score",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.enrichment.priorityScore"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "number"
+            },
+            "compositeScore": {
+              "label": "Composite Score",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.enrichment.compositeScore"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "number"
+            },
+            "epss": {
+              "label": "EPSS",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.enrichment.epss.epss"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "number"
+            },
+            "knownExploited": {
+              "label": "Known Exploited",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.enrichment.kev.isKnownExploited"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "boolean"
+            },
+            "cvssBaseScore": {
+              "label": "CVSS Base Score",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.enrichment.cvss.baseScore"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": true,
+              "item": true,
+              "valueType": "number"
+            },
+            "cvssVector": {
+              "label": "CVSS Vector",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.enrichment.cvss.cvssVector"
+              },
+              "humanReadable": true,
+              "sortable": false,
+              "filterable": true,
+              "list": false,
+              "item": true,
+              "valueType": "string"
+            },
+            "enrichedAt": {
+              "label": "Enriched At",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.enrichedAt"
+              },
+              "humanReadable": true,
+              "sortable": true,
+              "filterable": true,
+              "list": false,
+              "item": true,
+              "valueType": "datetime"
+            }
+          },
+          "relations": {
+            "groupVulnerabilities": {
+              "targetEntity": "vulnerabilities",
+              "type": "oneToMany",
+              "source": {
+                "contentType": "snapshots",
+                "path": "data.plugin_id"
+              },
+              "target": {
+                "contentType": "snapshots",
+                "path": "data.pluginId"
+              },
+              "defaultMode": "array",
+              "defaultArrayProperty": "vulnerabilities",
+              "targetFields": [
+                "vulnerabilityId",
+                "assetIp",
+                "pluginName",
+                "severityLevel",
+                "riskLevel",
+                "priorityScore"
+              ]
+            }
+          }
+        }
+      ]
+    },
+    "listDescriptors": {
+      "catalogId": "memorix-list-descriptors",
+      "items": [
+        {
+          "id": "assets-main-list",
+          "entity": "assets",
+          "title": "Assets",
+          "leadingContentType": "snapshots",
+          "pagination": {
+            "enabled": true,
+            "defaultLimit": 50,
+            "maxLimit": 200
+          },
+          "filters": [],
+          "fields": [
+            "ipAddress",
+            "hostName",
+            "source",
+            "agentType",
+            "xdrOperationalStatus",
+            "xdrAgentStatus",
+            "hasVulnerabilities",
+            "criticalVulnerabilities",
+            "highVulnerabilities",
+            "potentialImpactLevel",
+            "pathsCount"
+          ],
+          "extensions": [],
+          "includeRelations": [],
+          "allowedSorts": [
+            "ipAddress",
+            "hostName",
+            "source",
+            "agentType",
+            "xdrOperationalStatus",
+            "xdrAgentStatus",
+            "hasVulnerabilities",
+            "criticalVulnerabilities",
+            "highVulnerabilities",
+            "potentialImpactLevel",
+            "pathsCount",
+            "lastSeen"
+          ],
+          "defaultSort": {
+            "property": "ipAddress",
+            "direction": "asc"
+          },
+          "allowSortDrivenLeadingOverride": false
+        },
+        {
+          "id": "vulnerabilities-main-list",
+          "entity": "vulnerabilities",
+          "title": "Vulnerabilities",
+          "leadingContentType": "snapshots",
+          "pagination": {
+            "enabled": true,
+            "defaultLimit": 50,
+            "maxLimit": 200
+          },
+          "filters": [],
+          "fields": [
+            "vulnerabilityId",
+            "assetIp",
+            "pluginName",
+            "pluginFamily",
+            "severityLevel",
+            "cveIds",
+            "riskLevel",
+            "priorityScore",
+            "epss",
+            "knownExploited",
+            "exploitabilityLevel",
+            "networkExposure"
+          ],
+          "extensions": [],
+          "includeRelations": [],
+          "allowedSorts": [
+            "vulnerabilityId",
+            "assetIp",
+            "pluginName",
+            "pluginFamily",
+            "severityLevel",
+            "riskLevel",
+            "priorityScore",
+            "epss",
+            "knownExploited",
+            "exploitabilityScore",
+            "exploitabilityLevel",
+            "networkExposure"
+          ],
+          "defaultSort": {
+            "property": "priorityScore",
+            "direction": "desc"
+          },
+          "allowSortDrivenLeadingOverride": false
+        },
+        {
+          "id": "critical-vulnerabilities-list",
+          "entity": "vulnerabilities",
+          "title": "Critical Vulnerabilities",
+          "leadingContentType": "snapshots",
+          "pagination": {
+            "enabled": true,
+            "defaultLimit": 50,
+            "maxLimit": 200
+          },
+          "filters": [
+            {
+              "property": "severityLevel",
+              "operator": "gte",
+              "value": 4
+            }
+          ],
+          "fields": [
+            "vulnerabilityId",
+            "assetIp",
+            "pluginName",
+            "severityLevel",
+            "riskLevel",
+            "priorityScore",
+            "epss",
+            "knownExploited",
+            "exploitabilityLevel"
+          ],
+          "extensions": [],
+          "includeRelations": [],
+          "allowedSorts": [
+            "severityLevel",
+            "riskLevel",
+            "priorityScore",
+            "epss",
+            "knownExploited",
+            "exploitabilityScore"
+          ],
+          "defaultSort": {
+            "property": "priorityScore",
+            "direction": "desc"
+          },
+          "allowSortDrivenLeadingOverride": false
+        },
+        {
+          "id": "variabilities-groups-main-list",
+          "entity": "variabilities-groups",
+          "title": "Vulnerability Groups",
+          "leadingContentType": "snapshots",
+          "pagination": {
+            "enabled": true,
+            "defaultLimit": 50,
+            "maxLimit": 200
+          },
+          "filters": [],
+          "fields": [
+            "groupId",
+            "pluginName",
+            "pluginFamily",
+            "severityLevel",
+            "affectedEntitiesCount",
+            "cveIds",
+            "riskLevel",
+            "priorityScore",
+            "epss",
+            "knownExploited"
+          ],
+          "extensions": [],
+          "includeRelations": [],
+          "allowedSorts": [
+            "groupId",
+            "pluginId",
+            "pluginName",
+            "pluginFamily",
+            "severityLevel",
+            "riskLevel",
+            "priorityScore",
+            "epss",
+            "knownExploited",
+            "cvssBaseScore"
+          ],
+          "defaultSort": {
+            "property": "priorityScore",
+            "direction": "desc"
+          },
+          "allowSortDrivenLeadingOverride": false
+        }
+      ]
+    },
+    "itemDescriptors": {
+      "catalogId": "memorix-item-descriptors",
+      "items": [
+        {
+          "id": "asset-detail-item",
+          "entity": "assets",
+          "title": "Asset Detail",
+          "identity": {
+            "idField": "entityId"
+          },
+          "contentTypes": [
+            {
+              "contentType": "snapshots",
+              "required": true,
+              "multiMatch": {
+                "strategy": "last",
+                "effectiveDatePath": "capturedAt",
+                "fallbackEffectiveDatePaths": [
+                  "snapshot.capturedAt",
+                  "data.xdr.last_seen"
+                ]
+              }
+            }
+          ],
+          "sections": [
+            {
+              "id": "summary",
+              "title": "Summary",
+              "fields": [
+                "ipAddress",
+                "hostName",
+                "source",
+                "agentType",
+                "xdrOperationalStatus",
+                "xdrAgentStatus",
+                "lastSeen",
+                "pathsCount"
+              ]
+            },
+            {
+              "id": "vulnerabilitySummary",
+              "title": "Vulnerability Summary",
+              "fields": [
+                "hasVulnerabilities",
+                "criticalVulnerabilities",
+                "highVulnerabilities",
+                "mediumVulnerabilities",
+                "lowVulnerabilities"
+              ]
+            },
+            {
+              "id": "impact",
+              "title": "Potential Impact",
+              "fields": [
+                "potentialImpactLevel",
+                "potentialImpactConfidence",
+                "potentialImpactStory"
+              ]
+            },
+            {
+              "id": "xdr",
+              "title": "XDR",
+              "fields": [
+                "users",
+                "rawXdr"
+              ]
+            }
+          ],
+          "includeRelations": [
+            {
+              "relation": "assetVulnerabilities",
+              "mode": "array",
+              "arrayProperty": "vulnerabilities",
+              "limit": 100,
+              "fields": [
+                "vulnerabilityId",
+                "pluginName",
+                "severityLevel",
+                "riskLevel",
+                "priorityScore",
+                "cveIds"
+              ]
+            }
+          ],
+          "content": {
+            "allowed": false
+          }
+        },
+        {
+          "id": "vulnerability-detail-item",
+          "entity": "vulnerabilities",
+          "title": "Vulnerability Detail",
+          "identity": {
+            "idField": "entityId"
+          },
+          "contentTypes": [
+            {
+              "contentType": "snapshots",
+              "required": true,
+              "multiMatch": {
+                "strategy": "last",
+                "effectiveDatePath": "capturedAt",
+                "fallbackEffectiveDatePaths": [
+                  "snapshot.capturedAt",
+                  "data.enrichment.enrichedAt"
+                ]
+              }
+            }
+          ],
+          "sections": [
+            {
+              "id": "summary",
+              "title": "Summary",
+              "fields": [
+                "vulnerabilityId",
+                "pluginName",
+                "pluginFamily",
+                "severity",
+                "severityLevel",
+                "cveIds"
+              ]
+            },
+            {
+              "id": "asset",
+              "title": "Affected Asset",
+              "fields": [
+                "assetIp",
+                "assetType",
+                "assetZone",
+                "assetHostname",
+                "assetMatched"
+              ]
+            },
+            {
+              "id": "risk",
+              "title": "Risk",
+              "fields": [
+                "riskLevel",
+                "priorityScore",
+                "compositeScore",
+                "exploitabilityScore",
+                "exploitabilityLevel"
+              ]
+            },
+            {
+              "id": "threatIntelligence",
+              "title": "Threat Intelligence",
+              "fields": [
+                "epss",
+                "epssPercentile",
+                "knownExploited",
+                "cvssBaseScore",
+                "cvssVector"
+              ]
+            },
+            {
+              "id": "networkAndMitre",
+              "title": "Network & MITRE",
+              "fields": [
+                "networkExposure",
+                "mitreTechniques",
+                "mitreAnalysis"
+              ]
+            }
+          ],
+          "includeRelations": [
+            {
+              "relation": "affectedAsset",
+              "mode": "extendFields",
+              "fields": [
+                "ipAddress",
+                "hostName",
+                "xdrOperationalStatus",
+                "xdrAgentStatus",
+                "potentialImpactLevel"
+              ]
+            },
+            {
+              "relation": "vulnerabilityGroup",
+              "mode": "extendFields",
+              "fields": [
+                "groupId",
+                "pluginName",
+                "severityLevel",
+                "affectedEntitiesCount",
+                "riskLevel",
+                "priorityScore"
+              ]
+            }
+          ],
+          "content": {
+            "allowed": false
+          }
+        },
+        {
+          "id": "variabilities-group-detail-item",
+          "entity": "variabilities-groups",
+          "title": "Vulnerability Group Detail",
+          "identity": {
+            "idField": "entityId"
+          },
+          "contentTypes": [
+            {
+              "contentType": "snapshots",
+              "required": true,
+              "multiMatch": {
+                "strategy": "last",
+                "effectiveDatePath": "capturedAt",
+                "fallbackEffectiveDatePaths": [
+                  "snapshot.capturedAt",
+                  "data.enrichedAt",
+                  "data.enrichment.enrichedAt"
+                ]
+              }
+            }
+          ],
+          "sections": [
+            {
+              "id": "summary",
+              "title": "Summary",
+              "fields": [
+                "groupId",
+                "type",
+                "pluginId",
+                "pluginName",
+                "pluginFamily",
+                "severity",
+                "severityLevel",
+                "cveIds",
+                "source"
+              ]
+            },
+            {
+              "id": "affectedEntities",
+              "title": "Affected Entities",
+              "fields": [
+                "affectedEntities",
+                "affectedEntitiesCount"
+              ]
+            },
+            {
+              "id": "risk",
+              "title": "Risk",
+              "fields": [
+                "riskLevel",
+                "priorityScore",
+                "compositeScore"
+              ]
+            },
+            {
+              "id": "threatIntelligence",
+              "title": "Threat Intelligence",
+              "fields": [
+                "epss",
+                "knownExploited",
+                "cvssBaseScore",
+                "cvssVector",
+                "enrichedAt"
+              ]
+            }
+          ],
+          "includeRelations": [
+            {
+              "relation": "groupVulnerabilities",
+              "mode": "array",
+              "arrayProperty": "vulnerabilities",
+              "limit": 200,
+              "fields": [
+                "vulnerabilityId",
+                "assetIp",
+                "pluginName",
+                "severityLevel",
+                "riskLevel",
+                "priorityScore"
+              ]
+            }
+          ],
+          "content": {
+            "allowed": false
+          }
+        }
+      ]
+    }
+  }
+}