@x12i/memorix-retrieval 1.18.0 → 1.20.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (53) hide show
  1. package/README.md +1 -1
  2. package/catalox-seeds/inputs/entity-descriptors/assets.json +73 -38
  3. package/catalox-seeds/inputs/entity-descriptors/topology-subnets.json +127 -0
  4. package/catalox-seeds/inputs/entity-descriptors/variabilities-groups.json +22 -33
  5. package/catalox-seeds/inputs/entity-descriptors/vulnerabilities.json +19 -30
  6. package/catalox-seeds/inputs/item-descriptors/asset-detail-item.json +20 -6
  7. package/catalox-seeds/inputs/item-descriptors/topology-subnet-detail-item.json +41 -0
  8. package/catalox-seeds/inputs/item-descriptors/variabilities-group-detail-item.json +5 -5
  9. package/catalox-seeds/inputs/item-descriptors/vulnerability-detail-item.json +5 -5
  10. package/catalox-seeds/inputs/list-descriptors/assets-main-list.json +4 -0
  11. package/catalox-seeds/inputs/list-descriptors/critical-vulnerabilities-list.json +5 -5
  12. package/catalox-seeds/inputs/list-descriptors/critical-vulnerabilities-slice.json +1 -1
  13. package/catalox-seeds/inputs/list-descriptors/topology-subnets-main-list.json +23 -0
  14. package/catalox-seeds/inputs/list-descriptors/variabilities-groups-main-list.json +3 -3
  15. package/catalox-seeds/inputs/list-descriptors/vulnerabilities-main-list.json +3 -3
  16. package/catalox-seeds/inputs/memorix-descriptors.bundle.json +328 -330
  17. package/catalox-seeds/inputs/memorix-item-descriptors.catalog.json +16 -16
  18. package/catalox-seeds/inputs/memorix-item-descriptors.items.json +16 -16
  19. package/catalox-seeds/inputs/memorix-list-descriptors.catalog.json +11 -11
  20. package/catalox-seeds/inputs/memorix-list-descriptors.items.json +41 -11
  21. package/catalox-seeds/inputs/memorix-object-type-descriptors.catalog.json +279 -303
  22. package/catalox-seeds/inputs/memorix-object-type-descriptors.items.json +279 -303
  23. package/catalox-seeds/memorix-retrieval-descriptors.manifest.json +411 -147
  24. package/dist/data/record-identity.d.ts +1 -1
  25. package/dist/data/record-identity.d.ts.map +1 -1
  26. package/dist/data/record-identity.js +30 -17
  27. package/dist/data/record-identity.js.map +1 -1
  28. package/dist/errors/errors.d.ts.map +1 -1
  29. package/dist/errors/errors.js +2 -1
  30. package/dist/errors/errors.js.map +1 -1
  31. package/dist/logging/logger.d.ts.map +1 -1
  32. package/dist/logging/logger.js +2 -1
  33. package/dist/logging/logger.js.map +1 -1
  34. package/dist/mongo/connection.d.ts.map +1 -1
  35. package/dist/mongo/connection.js +2 -1
  36. package/dist/mongo/connection.js.map +1 -1
  37. package/dist/seeds/build-manifest.d.ts.map +1 -1
  38. package/dist/seeds/build-manifest.js +29 -1
  39. package/dist/seeds/build-manifest.js.map +1 -1
  40. package/dist/seeds/default-seed-spec.d.ts.map +1 -1
  41. package/dist/seeds/default-seed-spec.js +4 -0
  42. package/dist/seeds/default-seed-spec.js.map +1 -1
  43. package/dist/seeds/merge-for-apply.d.ts.map +1 -1
  44. package/dist/seeds/merge-for-apply.js +3 -1
  45. package/dist/seeds/merge-for-apply.js.map +1 -1
  46. package/dist/tests/collection-parser.test.js +8 -3
  47. package/dist/tests/collection-parser.test.js.map +1 -1
  48. package/dist/tests/seed-manifest.test.js +3 -3
  49. package/dist/tests/seed-manifest.test.js.map +1 -1
  50. package/dist/tests/source-provenance.test.js +14 -8
  51. package/dist/tests/source-provenance.test.js.map +1 -1
  52. package/docs/MEMORIX-DATABASE-CONVENTIONS.md +48 -27
  53. package/package.json +5 -5
package/catalox-seeds/inputs/memorix-object-type-descriptors.catalog.json CHANGED
@@ -4,22 +4,26 @@
4
4
  {
5
5
  "id": "assets",
6
6
  "entityName": "assets",
7
+ "defaultListDescriptorId": "assets-main-list",
8
+ "defaultItemDescriptorId": "asset-detail-item",
9
+ "target": "entity",
7
10
  "collectionPrefix": "assets",
8
11
  "identity": {
9
12
  "allowedIdFields": [
10
- "entityId",
11
- "eventId"
13
+ "identity.recordId",
14
+ "identity.targetId"
12
15
  ],
13
16
  "requiredExactlyOne": true,
14
- "defaultIdField": "entityId"
17
+ "defaultIdField": "identity.recordId"
15
18
  },
16
19
  "defaults": {
17
20
  "canonicalContentType": "snapshots",
18
21
  "dataRoot": "data",
19
- "effectiveDatePath": "capturedAt",
22
+ "effectiveDatePath": "lifecycle.capturedAt",
20
23
  "fallbackEffectiveDatePaths": [
24
+ "capturedAt",
21
25
  "snapshot.capturedAt",
22
- "data.xdr.last_seen"
26
+ "data.lastSeen"
23
27
  ]
24
28
  },
25
29
  "contentTypes": {
@@ -28,10 +32,11 @@
28
32
  "collection": "assets-snapshots",
29
33
  "dataRoot": "data",
30
34
  "isCanonical": true,
31
- "effectiveDatePath": "capturedAt",
35
+ "effectiveDatePath": "lifecycle.capturedAt",
32
36
  "fallbackEffectiveDatePaths": [
37
+ "capturedAt",
33
38
  "snapshot.capturedAt",
34
- "data.xdr.last_seen"
39
+ "data.lastSeen"
35
40
  ]
36
41
  }
37
42
  },
@@ -40,7 +45,7 @@
40
45
  "label": "IP Address",
41
46
  "source": {
42
47
  "contentType": "snapshots",
43
- "path": "data.ip_address"
48
+ "path": "data.assetIp"
44
49
  },
45
50
  "humanReadable": true,
46
51
  "sortable": true,
@@ -53,7 +58,7 @@
53
58
  "label": "Source",
54
59
  "source": {
55
60
  "contentType": "snapshots",
56
- "path": "data._source"
61
+ "path": "sourceFacts.values._source.rawValue"
57
62
  },
58
63
  "humanReadable": true,
59
64
  "sortable": true,
@@ -66,7 +71,7 @@
66
71
  "label": "Host Name",
67
72
  "source": {
68
73
  "contentType": "snapshots",
69
- "path": "data.xdr.host_name"
74
+ "path": "data.assetName"
70
75
  },
71
76
  "humanReadable": true,
72
77
  "sortable": true,
@@ -79,7 +84,7 @@
79
84
  "label": "XDR Operational Status",
80
85
  "source": {
81
86
  "contentType": "snapshots",
82
- "path": "data.xdr.operational_status"
87
+ "path": "data.operationalStatus"
83
88
  },
84
89
  "humanReadable": true,
85
90
  "sortable": true,
@@ -92,7 +97,7 @@
92
97
  "label": "XDR Agent Status",
93
98
  "source": {
94
99
  "contentType": "snapshots",
95
- "path": "data.xdr.agent_status"
100
+ "path": "data.agentStatus"
96
101
  },
97
102
  "humanReadable": true,
98
103
  "sortable": true,
@@ -105,7 +110,7 @@
105
110
  "label": "Agent Type",
106
111
  "source": {
107
112
  "contentType": "snapshots",
108
- "path": "data.xdr.agent_type"
113
+ "path": "data.agentType"
109
114
  },
110
115
  "humanReadable": true,
111
116
  "sortable": true,
@@ -118,7 +123,7 @@
118
123
  "label": "Last Seen",
119
124
  "source": {
120
125
  "contentType": "snapshots",
121
- "path": "data.xdr.last_seen"
126
+ "path": "data.lastSeen"
122
127
  },
123
128
  "humanReadable": true,
124
129
  "sortable": true,
@@ -127,24 +132,11 @@
127
132
  "item": true,
128
133
  "valueType": "datetime"
129
134
  },
130
- "users": {
131
- "label": "Users",
132
- "source": {
133
- "contentType": "snapshots",
134
- "path": "data.xdr.users"
135
- },
136
- "humanReadable": true,
137
- "sortable": false,
138
- "filterable": true,
139
- "list": true,
140
- "item": true,
141
- "valueType": "array"
142
- },
143
135
  "hasVulnerabilities": {
144
136
  "label": "Has Vulnerabilities",
145
137
  "source": {
146
138
  "contentType": "snapshots",
147
- "path": "data.vulnerabilities.hasVulnerabilities"
139
+ "path": "data.hasVulnerabilities"
148
140
  },
149
141
  "humanReadable": true,
150
142
  "sortable": true,
@@ -157,7 +149,7 @@
157
149
  "label": "Critical Vulnerabilities",
158
150
  "source": {
159
151
  "contentType": "snapshots",
160
- "path": "data.vulnerabilities.count.critical"
152
+ "path": "analytics.vulnerabilities.critical"
161
153
  },
162
154
  "humanReadable": true,
163
155
  "sortable": true,
@@ -170,7 +162,7 @@
170
162
  "label": "High Vulnerabilities",
171
163
  "source": {
172
164
  "contentType": "snapshots",
173
- "path": "data.vulnerabilities.count.high"
165
+ "path": "analytics.vulnerabilities.high"
174
166
  },
175
167
  "humanReadable": true,
176
168
  "sortable": true,
@@ -183,7 +175,7 @@
183
175
  "label": "Medium Vulnerabilities",
184
176
  "source": {
185
177
  "contentType": "snapshots",
186
- "path": "data.vulnerabilities.count.medium"
178
+ "path": "analytics.vulnerabilities.medium"
187
179
  },
188
180
  "humanReadable": true,
189
181
  "sortable": true,
@@ -196,7 +188,7 @@
196
188
  "label": "Low Vulnerabilities",
197
189
  "source": {
198
190
  "contentType": "snapshots",
199
- "path": "data.vulnerabilities.count.low"
191
+ "path": "analytics.vulnerabilities.low"
200
192
  },
201
193
  "humanReadable": true,
202
194
  "sortable": true,
@@ -209,7 +201,7 @@
209
201
  "label": "Potential Impact",
210
202
  "source": {
211
203
  "contentType": "snapshots",
212
- "path": "data.potentialImpact.level"
204
+ "path": "insights.potentialImpact.level"
213
205
  },
214
206
  "humanReadable": true,
215
207
  "sortable": true,
@@ -222,7 +214,7 @@
222
214
  "label": "Impact Confidence",
223
215
  "source": {
224
216
  "contentType": "snapshots",
225
- "path": "data.potentialImpact.confidence"
217
+ "path": "insights.potentialImpact.confidence"
226
218
  },
227
219
  "humanReadable": true,
228
220
  "sortable": true,
@@ -235,7 +227,7 @@
235
227
  "label": "Potential Impact Story",
236
228
  "source": {
237
229
  "contentType": "snapshots",
238
- "path": "data.potentialImpact.story"
230
+ "path": "insights.potentialImpact.story"
239
231
  },
240
232
  "humanReadable": false,
241
233
  "sortable": false,
@@ -248,7 +240,7 @@
248
240
  "label": "Paths Count",
249
241
  "source": {
250
242
  "contentType": "snapshots",
251
- "path": "data.pathsCount"
243
+ "path": "analytics.paths.total"
252
244
  },
253
245
  "humanReadable": true,
254
246
  "sortable": true,
@@ -261,7 +253,7 @@
261
253
  "label": "Raw XDR",
262
254
  "source": {
263
255
  "contentType": "snapshots",
264
- "path": "data.xdr"
256
+ "path": "sourceFacts.values.xdrRaw.rawValue"
265
257
  },
266
258
  "humanReadable": false,
267
259
  "sortable": false,
@@ -277,7 +269,7 @@
277
269
  "type": "oneToMany",
278
270
  "source": {
279
271
  "contentType": "snapshots",
280
- "path": "data.ip_address"
272
+ "path": "data.assetIp"
281
273
  },
282
274
  "target": {
283
275
  "contentType": "snapshots",
@@ -288,54 +280,61 @@
288
280
  "targetFields": [
289
281
  "vulnerabilityId",
290
282
  "pluginName",
291
- "severityLevel",
283
+ "severity",
292
284
  "riskLevel",
293
285
  "priorityScore",
294
- "cveIds"
286
+ "cveId"
295
287
  ]
296
288
  }
297
289
  }
298
290
  },
299
291
  {
300
- "id": "vulnerabilities",
301
- "entityName": "vulnerabilities",
302
- "collectionPrefix": "vulnerabilities",
292
+ "id": "variabilities-groups",
293
+ "entityName": "variabilities-groups",
294
+ "defaultListDescriptorId": "variabilities-groups-main-list",
295
+ "defaultItemDescriptorId": "variabilities-group-detail-item",
296
+ "target": "entity",
297
+ "collectionPrefix": "variabilities-groups",
303
298
  "identity": {
304
299
  "allowedIdFields": [
305
- "entityId",
306
- "eventId"
300
+ "identity.recordId",
301
+ "identity.targetId"
307
302
  ],
308
303
  "requiredExactlyOne": true,
309
- "defaultIdField": "entityId"
304
+ "defaultIdField": "identity.recordId"
310
305
  },
311
306
  "defaults": {
312
307
  "canonicalContentType": "snapshots",
313
308
  "dataRoot": "data",
314
- "effectiveDatePath": "capturedAt",
309
+ "effectiveDatePath": "lifecycle.capturedAt",
315
310
  "fallbackEffectiveDatePaths": [
311
+ "capturedAt",
316
312
  "snapshot.capturedAt",
313
+ "data.enrichedAt",
317
314
  "data.enrichment.enrichedAt"
318
315
  ]
319
316
  },
320
317
  "contentTypes": {
321
318
  "snapshots": {
322
319
  "postfix": "snapshots",
323
- "collection": "vulnerabilities-snapshots",
320
+ "collection": "variabilities-groups-snapshots",
324
321
  "dataRoot": "data",
325
322
  "isCanonical": true,
326
- "effectiveDatePath": "capturedAt",
323
+ "effectiveDatePath": "lifecycle.capturedAt",
327
324
  "fallbackEffectiveDatePaths": [
325
+ "capturedAt",
328
326
  "snapshot.capturedAt",
327
+ "data.enrichedAt",
329
328
  "data.enrichment.enrichedAt"
330
329
  ]
331
330
  }
332
331
  },
333
332
  "properties": {
334
- "vulnerabilityId": {
335
- "label": "Vulnerability ID",
333
+ "groupId": {
334
+ "label": "Group ID",
336
335
  "source": {
337
336
  "contentType": "snapshots",
338
- "path": "data.vulnerabilityId"
337
+ "path": "sourceFacts.values.id.rawValue"
339
338
  },
340
339
  "humanReadable": true,
341
340
  "sortable": true,
@@ -344,11 +343,11 @@
344
343
  "item": true,
345
344
  "valueType": "string"
346
345
  },
347
- "assetIp": {
348
- "label": "Asset IP",
346
+ "type": {
347
+ "label": "Type",
349
348
  "source": {
350
349
  "contentType": "snapshots",
351
- "path": "data.assetIp"
350
+ "path": "sourceFacts.values.type.rawValue"
352
351
  },
353
352
  "humanReadable": true,
354
353
  "sortable": true,
@@ -357,24 +356,24 @@
357
356
  "item": true,
358
357
  "valueType": "string"
359
358
  },
360
- "assetType": {
361
- "label": "Asset Type",
359
+ "pluginId": {
360
+ "label": "Plugin ID",
362
361
  "source": {
363
362
  "contentType": "snapshots",
364
- "path": "data.assetType"
363
+ "path": "sourceFacts.values.plugin_id.rawValue"
365
364
  },
366
365
  "humanReadable": true,
367
366
  "sortable": true,
368
367
  "filterable": true,
369
368
  "list": true,
370
369
  "item": true,
371
- "valueType": "string"
370
+ "valueType": "number"
372
371
  },
373
- "assetZone": {
374
- "label": "Asset Zone",
372
+ "pluginName": {
373
+ "label": "Plugin Name",
375
374
  "source": {
376
375
  "contentType": "snapshots",
377
- "path": "data.assetZone"
376
+ "path": "data.name"
378
377
  },
379
378
  "humanReadable": true,
380
379
  "sortable": true,
@@ -383,11 +382,11 @@
383
382
  "item": true,
384
383
  "valueType": "string"
385
384
  },
386
- "assetHostname": {
387
- "label": "Asset Hostname",
385
+ "pluginFamily": {
386
+ "label": "Plugin Family",
388
387
  "source": {
389
388
  "contentType": "snapshots",
390
- "path": "data.assetHostname"
389
+ "path": "data.vulnerability_family"
391
390
  },
392
391
  "humanReadable": true,
393
392
  "sortable": true,
@@ -396,83 +395,71 @@
396
395
  "item": true,
397
396
  "valueType": "string"
398
397
  },
399
- "pluginId": {
400
- "label": "Plugin ID",
398
+ "severity": {
399
+ "label": "Severity",
401
400
  "source": {
402
401
  "contentType": "snapshots",
403
- "path": "data.pluginId"
402
+ "path": "data.severity"
404
403
  },
405
404
  "humanReadable": true,
406
405
  "sortable": true,
407
406
  "filterable": true,
408
407
  "list": true,
409
408
  "item": true,
410
- "valueType": "number"
409
+ "valueType": "string"
411
410
  },
412
- "pluginName": {
413
- "label": "Plugin Name",
411
+ "affectedEntities": {
412
+ "label": "Affected Entities",
414
413
  "source": {
415
414
  "contentType": "snapshots",
416
- "path": "data.pluginName"
415
+ "path": "associatedData.affectedAssets"
417
416
  },
418
417
  "humanReadable": true,
419
- "sortable": true,
418
+ "sortable": false,
420
419
  "filterable": true,
421
- "list": true,
420
+ "list": false,
422
421
  "item": true,
423
- "valueType": "string"
422
+ "valueType": "array"
424
423
  },
425
- "pluginFamily": {
426
- "label": "Plugin Family",
424
+ "affectedEntitiesCount": {
425
+ "label": "Affected Entities Count",
427
426
  "source": {
428
427
  "contentType": "snapshots",
429
- "path": "data.pluginFamily"
428
+ "path": "associatedData.affectedAssets"
430
429
  },
431
430
  "humanReadable": true,
432
- "sortable": true,
433
- "filterable": true,
431
+ "sortable": false,
432
+ "filterable": false,
434
433
  "list": true,
435
434
  "item": true,
436
- "valueType": "string"
435
+ "valueType": "array",
436
+ "format": "count"
437
437
  },
438
- "severity": {
439
- "label": "Severity",
438
+ "source": {
439
+ "label": "Source",
440
440
  "source": {
441
441
  "contentType": "snapshots",
442
- "path": "data.severity"
442
+ "path": "data.source"
443
443
  },
444
444
  "humanReadable": true,
445
445
  "sortable": true,
446
446
  "filterable": true,
447
- "list": true,
447
+ "list": false,
448
448
  "item": true,
449
449
  "valueType": "string"
450
450
  },
451
- "severityLevel": {
452
- "label": "Severity Level",
451
+ "cveId": {
452
+ "label": "CVE",
453
453
  "source": {
454
454
  "contentType": "snapshots",
455
- "path": "data.severityLevel"
455
+ "path": "data.cveId"
456
456
  },
457
457
  "humanReadable": true,
458
458
  "sortable": true,
459
459
  "filterable": true,
460
460
  "list": true,
461
461
  "item": true,
462
- "valueType": "number"
463
- },
464
- "cveIds": {
465
- "label": "CVEs",
466
- "source": {
467
- "contentType": "snapshots",
468
- "path": "data.cveIds"
469
- },
470
- "humanReadable": true,
471
- "sortable": false,
472
- "filterable": true,
473
- "list": true,
474
- "item": true,
475
- "valueType": "array"
462
+ "valueType": "string"
476
463
  },
477
464
  "riskLevel": {
478
465
  "label": "Risk Level",
@@ -526,19 +513,6 @@
526
513
  "item": true,
527
514
  "valueType": "number"
528
515
  },
529
- "epssPercentile": {
530
- "label": "EPSS Percentile",
531
- "source": {
532
- "contentType": "snapshots",
533
- "path": "data.enrichment.epss.percentile"
534
- },
535
- "humanReadable": true,
536
- "sortable": true,
537
- "filterable": true,
538
- "list": true,
539
- "item": true,
540
- "valueType": "number"
541
- },
542
516
  "knownExploited": {
543
517
  "label": "Known Exploited",
544
518
  "source": {
@@ -578,136 +552,39 @@
578
552
  "item": true,
579
553
  "valueType": "string"
580
554
  },
581
- "exploitabilityScore": {
582
- "label": "Exploitability Score",
583
- "source": {
584
- "contentType": "snapshots",
585
- "path": "data.exploitabilityScore"
586
- },
587
- "humanReadable": true,
588
- "sortable": true,
589
- "filterable": true,
590
- "list": true,
591
- "item": true,
592
- "valueType": "number"
593
- },
594
- "exploitabilityLevel": {
595
- "label": "Exploitability Level",
596
- "source": {
597
- "contentType": "snapshots",
598
- "path": "data.exploitabilityLevel"
599
- },
600
- "humanReadable": true,
601
- "sortable": true,
602
- "filterable": true,
603
- "list": true,
604
- "item": true,
605
- "valueType": "string"
606
- },
607
- "assetMatched": {
608
- "label": "Asset Matched",
609
- "source": {
610
- "contentType": "snapshots",
611
- "path": "data.assetMatched"
612
- },
613
- "humanReadable": true,
614
- "sortable": true,
615
- "filterable": true,
616
- "list": false,
617
- "item": true,
618
- "valueType": "boolean"
619
- },
620
- "networkExposure": {
621
- "label": "Network Exposure",
555
+ "enrichedAt": {
556
+ "label": "Enriched At",
622
557
  "source": {
623
558
  "contentType": "snapshots",
624
- "path": "data.mitreAnalysis.networkContext.exposure"
559
+ "path": "data.enrichedAt"
625
560
  },
626
561
  "humanReadable": true,
627
562
  "sortable": true,
628
563
  "filterable": true,
629
- "list": true,
630
- "item": true,
631
- "valueType": "string"
632
- },
633
- "attackPathCount": {
634
- "label": "Attack Path Count",
635
- "source": {
636
- "contentType": "snapshots",
637
- "path": "data.mitreAnalysis.networkContext.paths.paths"
638
- },
639
- "humanReadable": true,
640
- "sortable": false,
641
- "filterable": false,
642
- "list": false,
643
- "item": true,
644
- "valueType": "array"
645
- },
646
- "mitreTechniques": {
647
- "label": "MITRE Techniques",
648
- "source": {
649
- "contentType": "snapshots",
650
- "path": "data.mitreAnalysis.techniques"
651
- },
652
- "humanReadable": true,
653
- "sortable": false,
654
- "filterable": true,
655
- "list": false,
656
- "item": true,
657
- "valueType": "array"
658
- },
659
- "mitreAnalysis": {
660
- "label": "MITRE Analysis",
661
- "source": {
662
- "contentType": "snapshots",
663
- "path": "data.mitreAnalysis"
664
- },
665
- "humanReadable": false,
666
- "sortable": false,
667
- "filterable": false,
668
564
  "list": false,
669
565
  "item": true,
670
- "valueType": "object"
566
+ "valueType": "datetime"
671
567
  }
672
568
  },
673
569
  "relations": {
674
- "affectedAsset": {
675
- "targetEntity": "assets",
676
- "type": "manyToOne",
677
- "source": {
678
- "contentType": "snapshots",
679
- "path": "data.assetIp"
680
- },
681
- "target": {
682
- "contentType": "snapshots",
683
- "path": "data.ip_address"
684
- },
685
- "defaultMode": "extendFields",
686
- "targetFields": [
687
- "ipAddress",
688
- "hostName",
689
- "xdrOperationalStatus",
690
- "xdrAgentStatus",
691
- "potentialImpactLevel"
692
- ]
693
- },
694
- "vulnerabilityGroup": {
695
- "targetEntity": "variabilities-groups",
696
- "type": "manyToOne",
570
+ "groupVulnerabilities": {
571
+ "targetEntity": "vulnerabilities",
572
+ "type": "oneToMany",
697
573
  "source": {
698
574
  "contentType": "snapshots",
699
- "path": "data.pluginId"
575
+ "path": "sourceFacts.values.plugin_id.rawValue"
700
576
  },
701
577
  "target": {
702
578
  "contentType": "snapshots",
703
- "path": "data.plugin_id"
579
+ "path": "sourceFacts.values.pluginId.rawValue"
704
580
  },
705
- "defaultMode": "extendFields",
581
+ "defaultMode": "array",
582
+ "defaultArrayProperty": "vulnerabilities",
706
583
  "targetFields": [
707
- "groupId",
584
+ "vulnerabilityId",
585
+ "assetIp",
708
586
  "pluginName",
709
- "severityLevel",
710
- "affectedEntitiesCount",
587
+ "severity",
711
588
  "riskLevel",
712
589
  "priorityScore"
713
590
  ]
@@ -715,47 +592,50 @@
715
592
  }
716
593
  },
717
594
  {
718
- "id": "variabilities-groups",
719
- "entityName": "variabilities-groups",
720
- "collectionPrefix": "variabilities-groups",
595
+ "id": "vulnerabilities",
596
+ "entityName": "vulnerabilities",
597
+ "defaultListDescriptorId": "vulnerabilities-main-list",
598
+ "defaultItemDescriptorId": "vulnerability-detail-item",
599
+ "target": "event",
600
+ "collectionPrefix": "vulnerabilities",
721
601
  "identity": {
722
602
  "allowedIdFields": [
723
- "entityId",
724
- "eventId"
603
+ "identity.recordId",
604
+ "identity.targetId"
725
605
  ],
726
606
  "requiredExactlyOne": true,
727
- "defaultIdField": "entityId"
607
+ "defaultIdField": "identity.recordId"
728
608
  },
729
609
  "defaults": {
730
610
  "canonicalContentType": "snapshots",
731
611
  "dataRoot": "data",
732
- "effectiveDatePath": "capturedAt",
612
+ "effectiveDatePath": "lifecycle.capturedAt",
733
613
  "fallbackEffectiveDatePaths": [
614
+ "capturedAt",
734
615
  "snapshot.capturedAt",
735
- "data.enrichedAt",
736
616
  "data.enrichment.enrichedAt"
737
617
  ]
738
618
  },
739
619
  "contentTypes": {
740
620
  "snapshots": {
741
621
  "postfix": "snapshots",
742
- "collection": "variabilities-groups-snapshots",
622
+ "collection": "vulnerabilities-snapshots",
743
623
  "dataRoot": "data",
744
624
  "isCanonical": true,
745
- "effectiveDatePath": "capturedAt",
625
+ "effectiveDatePath": "lifecycle.capturedAt",
746
626
  "fallbackEffectiveDatePaths": [
627
+ "capturedAt",
747
628
  "snapshot.capturedAt",
748
- "data.enrichedAt",
749
629
  "data.enrichment.enrichedAt"
750
630
  ]
751
631
  }
752
632
  },
753
633
  "properties": {
754
- "groupId": {
755
- "label": "Group ID",
634
+ "vulnerabilityId": {
635
+ "label": "Vulnerability ID",
756
636
  "source": {
757
637
  "contentType": "snapshots",
758
- "path": "data.id"
638
+ "path": "sourceFacts.values.vulnerabilityId.rawValue"
759
639
  },
760
640
  "humanReadable": true,
761
641
  "sortable": true,
@@ -764,11 +644,11 @@
764
644
  "item": true,
765
645
  "valueType": "string"
766
646
  },
767
- "type": {
768
- "label": "Type",
647
+ "assetIp": {
648
+ "label": "Asset IP",
769
649
  "source": {
770
650
  "contentType": "snapshots",
771
- "path": "data.type"
651
+ "path": "data.assetIp"
772
652
  },
773
653
  "humanReadable": true,
774
654
  "sortable": true,
@@ -777,24 +657,24 @@
777
657
  "item": true,
778
658
  "valueType": "string"
779
659
  },
780
- "pluginId": {
781
- "label": "Plugin ID",
660
+ "assetType": {
661
+ "label": "Asset Type",
782
662
  "source": {
783
663
  "contentType": "snapshots",
784
- "path": "data.plugin_id"
664
+ "path": "data.assetType"
785
665
  },
786
666
  "humanReadable": true,
787
667
  "sortable": true,
788
668
  "filterable": true,
789
669
  "list": true,
790
670
  "item": true,
791
- "valueType": "number"
671
+ "valueType": "string"
792
672
  },
793
- "pluginName": {
794
- "label": "Plugin Name",
673
+ "assetZone": {
674
+ "label": "Asset Zone",
795
675
  "source": {
796
676
  "contentType": "snapshots",
797
- "path": "data.plugin_name"
677
+ "path": "data.assetZone"
798
678
  },
799
679
  "humanReadable": true,
800
680
  "sortable": true,
@@ -803,11 +683,11 @@
803
683
  "item": true,
804
684
  "valueType": "string"
805
685
  },
806
- "pluginFamily": {
807
- "label": "Plugin Family",
686
+ "assetHostname": {
687
+ "label": "Asset Hostname",
808
688
  "source": {
809
689
  "contentType": "snapshots",
810
- "path": "data.plugin_family"
690
+ "path": "data.assetHostname"
811
691
  },
812
692
  "humanReadable": true,
813
693
  "sortable": true,
@@ -816,84 +696,70 @@
816
696
  "item": true,
817
697
  "valueType": "string"
818
698
  },
819
- "severity": {
820
- "label": "Severity",
699
+ "pluginId": {
700
+ "label": "Plugin ID",
821
701
  "source": {
822
702
  "contentType": "snapshots",
823
- "path": "data.severity"
703
+ "path": "sourceFacts.values.pluginId.rawValue"
824
704
  },
825
705
  "humanReadable": true,
826
706
  "sortable": true,
827
707
  "filterable": true,
828
708
  "list": true,
829
709
  "item": true,
830
- "valueType": "string"
710
+ "valueType": "number"
831
711
  },
832
- "severityLevel": {
833
- "label": "Severity Level",
712
+ "pluginName": {
713
+ "label": "Plugin Name",
834
714
  "source": {
835
715
  "contentType": "snapshots",
836
- "path": "data.severity_level"
716
+ "path": "data.vulnerabilityName"
837
717
  },
838
718
  "humanReadable": true,
839
719
  "sortable": true,
840
720
  "filterable": true,
841
721
  "list": true,
842
722
  "item": true,
843
- "valueType": "number"
723
+ "valueType": "string"
844
724
  },
845
- "affectedEntities": {
846
- "label": "Affected Entities",
725
+ "pluginFamily": {
726
+ "label": "Plugin Family",
847
727
  "source": {
848
728
  "contentType": "snapshots",
849
- "path": "data.affected_entities"
729
+ "path": "data.vulnerabilityFamily"
850
730
  },
851
731
  "humanReadable": true,
852
- "sortable": false,
732
+ "sortable": true,
853
733
  "filterable": true,
854
- "list": false,
855
- "item": true,
856
- "valueType": "array"
857
- },
858
- "affectedEntitiesCount": {
859
- "label": "Affected Entities Count",
860
- "source": {
861
- "contentType": "snapshots",
862
- "path": "data.affected_entities"
863
- },
864
- "humanReadable": true,
865
- "sortable": false,
866
- "filterable": false,
867
734
  "list": true,
868
735
  "item": true,
869
- "valueType": "array",
870
- "format": "count"
736
+ "valueType": "string"
871
737
  },
872
- "source": {
873
- "label": "Source",
738
+ "severity": {
739
+ "label": "Severity",
874
740
  "source": {
875
741
  "contentType": "snapshots",
876
- "path": "data.source"
742
+ "path": "data.severity"
877
743
  },
878
744
  "humanReadable": true,
879
745
  "sortable": true,
880
746
  "filterable": true,
881
- "list": false,
747
+ "list": true,
882
748
  "item": true,
883
749
  "valueType": "string"
884
750
  },
885
- "cveIds": {
886
- "label": "CVEs",
751
+ "cveId": {
752
+ "label": "CVE",
887
753
  "source": {
888
754
  "contentType": "snapshots",
889
- "path": "data.cveIds"
755
+ "path": "data.cveId"
890
756
  },
891
757
  "humanReadable": true,
892
- "sortable": false,
758
+ "sortable": true,
893
759
  "filterable": true,
894
760
  "list": true,
895
761
  "item": true,
896
- "valueType": "array"
762
+ "valueType": "string"
897
763
  },
898
764
  "riskLevel": {
899
765
  "label": "Risk Level",
@@ -947,6 +813,19 @@
947
813
  "item": true,
948
814
  "valueType": "number"
949
815
  },
816
+ "epssPercentile": {
817
+ "label": "EPSS Percentile",
818
+ "source": {
819
+ "contentType": "snapshots",
820
+ "path": "data.enrichment.epss.percentile"
821
+ },
822
+ "humanReadable": true,
823
+ "sortable": true,
824
+ "filterable": true,
825
+ "list": true,
826
+ "item": true,
827
+ "valueType": "number"
828
+ },
950
829
  "knownExploited": {
951
830
  "label": "Known Exploited",
952
831
  "source": {
@@ -986,39 +865,136 @@
986
865
  "item": true,
987
866
  "valueType": "string"
988
867
  },
989
- "enrichedAt": {
990
- "label": "Enriched At",
868
+ "exploitabilityScore": {
869
+ "label": "Exploitability Score",
991
870
  "source": {
992
871
  "contentType": "snapshots",
993
- "path": "data.enrichedAt"
872
+ "path": "data.exploitabilityScore"
873
+ },
874
+ "humanReadable": true,
875
+ "sortable": true,
876
+ "filterable": true,
877
+ "list": true,
878
+ "item": true,
879
+ "valueType": "number"
880
+ },
881
+ "exploitabilityLevel": {
882
+ "label": "Exploitability Level",
883
+ "source": {
884
+ "contentType": "snapshots",
885
+ "path": "data.exploitabilityLevel"
886
+ },
887
+ "humanReadable": true,
888
+ "sortable": true,
889
+ "filterable": true,
890
+ "list": true,
891
+ "item": true,
892
+ "valueType": "string"
893
+ },
894
+ "assetMatched": {
895
+ "label": "Asset Matched",
896
+ "source": {
897
+ "contentType": "snapshots",
898
+ "path": "data.assetMatched"
994
899
  },
995
900
  "humanReadable": true,
996
901
  "sortable": true,
997
902
  "filterable": true,
998
903
  "list": false,
999
904
  "item": true,
1000
- "valueType": "datetime"
905
+ "valueType": "boolean"
906
+ },
907
+ "networkExposure": {
908
+ "label": "Network Exposure",
909
+ "source": {
910
+ "contentType": "snapshots",
911
+ "path": "data.mitreAnalysis.networkContext.exposure"
912
+ },
913
+ "humanReadable": true,
914
+ "sortable": true,
915
+ "filterable": true,
916
+ "list": true,
917
+ "item": true,
918
+ "valueType": "string"
919
+ },
920
+ "attackPathCount": {
921
+ "label": "Attack Path Count",
922
+ "source": {
923
+ "contentType": "snapshots",
924
+ "path": "data.mitreAnalysis.networkContext.paths.paths"
925
+ },
926
+ "humanReadable": true,
927
+ "sortable": false,
928
+ "filterable": false,
929
+ "list": false,
930
+ "item": true,
931
+ "valueType": "array"
932
+ },
933
+ "mitreTechniques": {
934
+ "label": "MITRE Techniques",
935
+ "source": {
936
+ "contentType": "snapshots",
937
+ "path": "data.mitreAnalysis.techniques"
938
+ },
939
+ "humanReadable": true,
940
+ "sortable": false,
941
+ "filterable": true,
942
+ "list": false,
943
+ "item": true,
944
+ "valueType": "array"
945
+ },
946
+ "mitreAnalysis": {
947
+ "label": "MITRE Analysis",
948
+ "source": {
949
+ "contentType": "snapshots",
950
+ "path": "data.mitreAnalysis"
951
+ },
952
+ "humanReadable": false,
953
+ "sortable": false,
954
+ "filterable": false,
955
+ "list": false,
956
+ "item": true,
957
+ "valueType": "object"
1001
958
  }
1002
959
  },
1003
960
  "relations": {
1004
- "groupVulnerabilities": {
1005
- "targetEntity": "vulnerabilities",
1006
- "type": "oneToMany",
961
+ "affectedAsset": {
962
+ "targetEntity": "assets",
963
+ "type": "manyToOne",
1007
964
  "source": {
1008
965
  "contentType": "snapshots",
1009
- "path": "data.plugin_id"
966
+ "path": "data.assetIp"
1010
967
  },
1011
968
  "target": {
1012
969
  "contentType": "snapshots",
1013
- "path": "data.pluginId"
970
+ "path": "data.assetIp"
1014
971
  },
1015
- "defaultMode": "array",
1016
- "defaultArrayProperty": "vulnerabilities",
972
+ "defaultMode": "extendFields",
1017
973
  "targetFields": [
1018
- "vulnerabilityId",
1019
- "assetIp",
974
+ "ipAddress",
975
+ "hostName",
976
+ "xdrOperationalStatus",
977
+ "xdrAgentStatus",
978
+ "potentialImpactLevel"
979
+ ]
980
+ },
981
+ "vulnerabilityGroup": {
982
+ "targetEntity": "variabilities-groups",
983
+ "type": "manyToOne",
984
+ "source": {
985
+ "contentType": "snapshots",
986
+ "path": "sourceFacts.values.pluginId.rawValue"
987
+ },
988
+ "target": {
989
+ "contentType": "snapshots",
990
+ "path": "sourceFacts.values.plugin_id.rawValue"
991
+ },
992
+ "defaultMode": "extendFields",
993
+ "targetFields": [
994
+ "groupId",
1020
995
  "pluginName",
1021
- "severityLevel",
996
+ "severity",
997
+ "affectedEntitiesCount",
1022
998
  "riskLevel",
1023
999
  "priorityScore"
1024
1000
  ]