@x12i/memorix-retrieval 1.19.0 → 1.20.0

package/catalox-seeds/inputs/entity-descriptors/assets.json

@@ -7,19 +7,20 @@
   "collectionPrefix": "assets",
   "identity": {
     "allowedIdFields": [
-      "entityId",
-      "eventId"
+      "identity.recordId",
+      "identity.targetId"
     ],
     "requiredExactlyOne": true,
-    "defaultIdField": "entityId"
+    "defaultIdField": "identity.recordId"
   },
   "defaults": {
     "canonicalContentType": "snapshots",
     "dataRoot": "data",
-    "effectiveDatePath": "capturedAt",
+    "effectiveDatePath": "lifecycle.capturedAt",
     "fallbackEffectiveDatePaths": [
+      "capturedAt",
       "snapshot.capturedAt",
-      "data.xdr.last_seen"
+      "data.lastSeen"
     ]
   },
   "contentTypes": {
@@ -28,10 +29,11 @@
       "collection": "assets-snapshots",
       "dataRoot": "data",
       "isCanonical": true,
-      "effectiveDatePath": "capturedAt",
+      "effectiveDatePath": "lifecycle.capturedAt",
       "fallbackEffectiveDatePaths": [
+        "capturedAt",
         "snapshot.capturedAt",
-        "data.xdr.last_seen"
+        "data.lastSeen"
       ]
     }
   },
@@ -49,11 +51,37 @@
       "item": true,
       "valueType": "string"
     },
+    "subnetIp": {
+      "label": "Subnet IP",
+      "source": {
+        "contentType": "snapshots",
+        "path": "data.subnetIp"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": true,
+      "item": true,
+      "valueType": "string"
+    },
+    "subnetId": {
+      "label": "Subnet ID",
+      "source": {
+        "contentType": "snapshots",
+        "path": "data.subnetId"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": true,
+      "item": true,
+      "valueType": "string"
+    },
     "source": {
       "label": "Source",
       "source": {
         "contentType": "snapshots",
-        "path": "data._source"
+        "path": "sourceFacts.values._source.rawValue"
       },
       "humanReadable": true,
       "sortable": true,
@@ -66,7 +94,7 @@
       "label": "Host Name",
       "source": {
         "contentType": "snapshots",
-        "path": "data.xdr.host_name"
+        "path": "data.assetName"
       },
       "humanReadable": true,
       "sortable": true,
@@ -79,7 +107,7 @@
       "label": "XDR Operational Status",
       "source": {
         "contentType": "snapshots",
-        "path": "data.xdr.operational_status"
+        "path": "data.operationalStatus"
       },
       "humanReadable": true,
       "sortable": true,
@@ -92,7 +120,7 @@
       "label": "XDR Agent Status",
       "source": {
         "contentType": "snapshots",
-        "path": "data.xdr.agent_status"
+        "path": "data.agentStatus"
       },
       "humanReadable": true,
       "sortable": true,
@@ -105,7 +133,7 @@
       "label": "Agent Type",
       "source": {
         "contentType": "snapshots",
-        "path": "data.xdr.agent_type"
+        "path": "data.agentType"
       },
       "humanReadable": true,
       "sortable": true,
@@ -118,7 +146,7 @@
       "label": "Last Seen",
       "source": {
         "contentType": "snapshots",
-        "path": "data.xdr.last_seen"
+        "path": "data.lastSeen"
       },
       "humanReadable": true,
       "sortable": true,
@@ -127,24 +155,11 @@
       "item": true,
       "valueType": "datetime"
     },
-    "users": {
-      "label": "Users",
-      "source": {
-        "contentType": "snapshots",
-        "path": "data.xdr.users"
-      },
-      "humanReadable": true,
-      "sortable": false,
-      "filterable": true,
-      "list": true,
-      "item": true,
-      "valueType": "array"
-    },
     "hasVulnerabilities": {
       "label": "Has Vulnerabilities",
       "source": {
         "contentType": "snapshots",
-        "path": "data.vulnerabilities.hasVulnerabilities"
+        "path": "data.hasVulnerabilities"
       },
       "humanReadable": true,
       "sortable": true,
@@ -157,7 +172,7 @@
       "label": "Critical Vulnerabilities",
       "source": {
         "contentType": "snapshots",
-        "path": "data.vulnerabilities.count.critical"
+        "path": "analytics.vulnerabilities.critical"
       },
       "humanReadable": true,
       "sortable": true,
@@ -170,7 +185,7 @@
       "label": "High Vulnerabilities",
       "source": {
         "contentType": "snapshots",
-        "path": "data.vulnerabilities.count.high"
+        "path": "analytics.vulnerabilities.high"
       },
       "humanReadable": true,
       "sortable": true,
@@ -183,7 +198,7 @@
       "label": "Medium Vulnerabilities",
       "source": {
         "contentType": "snapshots",
-        "path": "data.vulnerabilities.count.medium"
+        "path": "analytics.vulnerabilities.medium"
       },
       "humanReadable": true,
       "sortable": true,
@@ -196,7 +211,7 @@
       "label": "Low Vulnerabilities",
       "source": {
         "contentType": "snapshots",
-        "path": "data.vulnerabilities.count.low"
+        "path": "analytics.vulnerabilities.low"
       },
       "humanReadable": true,
       "sortable": true,
@@ -209,7 +224,7 @@
       "label": "Potential Impact",
       "source": {
         "contentType": "snapshots",
-        "path": "data.potentialImpact.level"
+        "path": "insights.potentialImpact.level"
       },
       "humanReadable": true,
       "sortable": true,
@@ -222,7 +237,7 @@
       "label": "Impact Confidence",
       "source": {
         "contentType": "snapshots",
-        "path": "data.potentialImpact.confidence"
+        "path": "insights.potentialImpact.confidence"
       },
       "humanReadable": true,
       "sortable": true,
@@ -235,7 +250,7 @@
       "label": "Potential Impact Story",
       "source": {
         "contentType": "snapshots",
-        "path": "data.potentialImpact.story"
+        "path": "insights.potentialImpact.story"
       },
       "humanReadable": false,
       "sortable": false,
@@ -248,7 +263,7 @@
       "label": "Paths Count",
       "source": {
         "contentType": "snapshots",
-        "path": "data.pathsCount"
+        "path": "analytics.paths.total"
       },
       "humanReadable": true,
       "sortable": true,
@@ -261,7 +276,7 @@
       "label": "Raw XDR",
       "source": {
         "contentType": "snapshots",
-        "path": "data.xdr"
+        "path": "sourceFacts.values.xdrRaw.rawValue"
       },
       "humanReadable": false,
       "sortable": false,
@@ -272,6 +287,26 @@
     }
   },
   "relations": {
+    "assetSubnet": {
+      "targetEntity": "topology-subnets",
+      "type": "manyToOne",
+      "source": {
+        "contentType": "snapshots",
+        "path": "data.subnetId"
+      },
+      "target": {
+        "contentType": "snapshots",
+        "path": "data.subnetId"
+      },
+      "defaultMode": "record",
+      "targetFields": [
+        "subnetId",
+        "subnetIp",
+        "cidr",
+        "zone",
+        "vr"
+      ]
+    },
     "assetVulnerabilities": {
       "targetEntity": "vulnerabilities",
       "type": "oneToMany",
@@ -288,10 +323,10 @@
       "targetFields": [
         "vulnerabilityId",
         "pluginName",
-        "severityLevel",
+        "severity",
         "riskLevel",
         "priorityScore",
-        "cveIds"
+        "cveId"
       ]
     }
   }

package/catalox-seeds/inputs/entity-descriptors/topology-subnets.json

@@ -0,0 +1,127 @@
+{
+  "id": "topology-subnets",
+  "entityName": "topology-subnets",
+  "target": "entity",
+  "defaultListDescriptorId": "topology-subnets-main-list",
+  "defaultItemDescriptorId": "topology-subnet-detail-item",
+  "collectionPrefix": "topology-subnets",
+  "identity": {
+    "allowedIdFields": [
+      "entityId",
+      "recordId",
+      "_id"
+    ],
+    "requiredExactlyOne": false,
+    "defaultIdField": "entityId"
+  },
+  "defaults": {
+    "canonicalContentType": "snapshots",
+    "dataRoot": "data",
+    "effectiveDatePath": "capturedAt",
+    "fallbackEffectiveDatePaths": [
+      "modifiedAt",
+      "createdAt"
+    ]
+  },
+  "contentTypes": {
+    "snapshots": {
+      "postfix": "snapshots",
+      "collection": "topology-subnets-snapshots",
+      "isCanonical": true
+    }
+  },
+  "properties": {
+    "recordId": {
+      "label": "Record ID",
+      "source": {
+        "contentType": "snapshots",
+        "path": "recordId"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": true,
+      "item": true,
+      "valueType": "string"
+    },
+    "subnetIp": {
+      "label": "Subnet",
+      "source": {
+        "contentType": "snapshots",
+        "path": "data.subnetIp"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": true,
+      "item": true,
+      "valueType": "string"
+    },
+    "subnetId": {
+      "label": "Subnet ID",
+      "source": {
+        "contentType": "snapshots",
+        "path": "data.subnetId"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": true,
+      "item": true,
+      "valueType": "string"
+    },
+    "cidr": {
+      "label": "Subnet CIDR",
+      "source": {
+        "contentType": "snapshots",
+        "path": "data.cidr"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": true,
+      "item": true,
+      "valueType": "string"
+    },
+    "zone": {
+      "label": "Zone",
+      "source": {
+        "contentType": "snapshots",
+        "path": "data.zone"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": true,
+      "item": true,
+      "valueType": "string"
+    },
+    "zoneClass": {
+      "label": "Zone Class",
+      "source": {
+        "contentType": "snapshots",
+        "path": "data.zoneClass"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": false,
+      "item": true,
+      "valueType": "string"
+    },
+    "vr": {
+      "label": "VR",
+      "source": {
+        "contentType": "snapshots",
+        "path": "data.vr"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": true,
+      "item": true,
+      "valueType": "string"
+    }
+  },
+  "relations": {}
+}

package/catalox-seeds/inputs/entity-descriptors/variabilities-groups.json

@@ -7,17 +7,18 @@
   "collectionPrefix": "variabilities-groups",
   "identity": {
     "allowedIdFields": [
-      "entityId",
-      "eventId"
+      "identity.recordId",
+      "identity.targetId"
     ],
     "requiredExactlyOne": true,
-    "defaultIdField": "entityId"
+    "defaultIdField": "identity.recordId"
   },
   "defaults": {
     "canonicalContentType": "snapshots",
     "dataRoot": "data",
-    "effectiveDatePath": "capturedAt",
+    "effectiveDatePath": "lifecycle.capturedAt",
     "fallbackEffectiveDatePaths": [
+      "capturedAt",
       "snapshot.capturedAt",
       "data.enrichedAt",
       "data.enrichment.enrichedAt"
@@ -29,8 +30,9 @@
       "collection": "variabilities-groups-snapshots",
       "dataRoot": "data",
       "isCanonical": true,
-      "effectiveDatePath": "capturedAt",
+      "effectiveDatePath": "lifecycle.capturedAt",
       "fallbackEffectiveDatePaths": [
+        "capturedAt",
         "snapshot.capturedAt",
         "data.enrichedAt",
         "data.enrichment.enrichedAt"
@@ -42,7 +44,7 @@
       "label": "Group ID",
       "source": {
         "contentType": "snapshots",
-        "path": "data.id"
+        "path": "sourceFacts.values.id.rawValue"
       },
       "humanReadable": true,
       "sortable": true,
@@ -55,7 +57,7 @@
       "label": "Type",
       "source": {
         "contentType": "snapshots",
-        "path": "data.type"
+        "path": "sourceFacts.values.type.rawValue"
       },
       "humanReadable": true,
       "sortable": true,
@@ -68,7 +70,7 @@
       "label": "Plugin ID",
       "source": {
         "contentType": "snapshots",
-        "path": "data.plugin_id"
+        "path": "sourceFacts.values.plugin_id.rawValue"
       },
       "humanReadable": true,
       "sortable": true,
@@ -81,7 +83,7 @@
       "label": "Plugin Name",
       "source": {
         "contentType": "snapshots",
-        "path": "data.plugin_name"
+        "path": "data.name"
       },
       "humanReadable": true,
       "sortable": true,
@@ -94,7 +96,7 @@
       "label": "Plugin Family",
       "source": {
         "contentType": "snapshots",
-        "path": "data.plugin_family"
+        "path": "data.vulnerability_family"
       },
       "humanReadable": true,
       "sortable": true,
@@ -116,24 +118,11 @@
       "item": true,
       "valueType": "string"
     },
-    "severityLevel": {
-      "label": "Severity Level",
-      "source": {
-        "contentType": "snapshots",
-        "path": "data.severity_level"
-      },
-      "humanReadable": true,
-      "sortable": true,
-      "filterable": true,
-      "list": true,
-      "item": true,
-      "valueType": "number"
-    },
     "affectedEntities": {
       "label": "Affected Entities",
       "source": {
         "contentType": "snapshots",
-        "path": "data.affected_entities"
+        "path": "associatedData.affectedAssets"
       },
       "humanReadable": true,
       "sortable": false,
@@ -146,7 +135,7 @@
       "label": "Affected Entities Count",
       "source": {
         "contentType": "snapshots",
-        "path": "data.affected_entities"
+        "path": "associatedData.affectedAssets"
       },
       "humanReadable": true,
       "sortable": false,
@@ -169,18 +158,18 @@
       "item": true,
       "valueType": "string"
     },
-    "cveIds": {
-      "label": "CVEs",
+    "cveId": {
+      "label": "CVE",
       "source": {
         "contentType": "snapshots",
-        "path": "data.cveIds"
+        "path": "data.cveId"
       },
       "humanReadable": true,
-      "sortable": false,
+      "sortable": true,
       "filterable": true,
       "list": true,
       "item": true,
-      "valueType": "array"
+      "valueType": "string"
     },
     "riskLevel": {
       "label": "Risk Level",
@@ -293,11 +282,11 @@
       "type": "oneToMany",
       "source": {
         "contentType": "snapshots",
-        "path": "data.plugin_id"
+        "path": "sourceFacts.values.plugin_id.rawValue"
       },
       "target": {
         "contentType": "snapshots",
-        "path": "data.pluginId"
+        "path": "sourceFacts.values.pluginId.rawValue"
       },
       "defaultMode": "array",
       "defaultArrayProperty": "vulnerabilities",
@@ -305,7 +294,7 @@
         "vulnerabilityId",
         "assetIp",
         "pluginName",
-        "severityLevel",
+        "severity",
         "riskLevel",
         "priorityScore"
       ]

package/catalox-seeds/inputs/entity-descriptors/vulnerabilities.json

@@ -7,17 +7,18 @@
   "collectionPrefix": "vulnerabilities",
   "identity": {
     "allowedIdFields": [
-      "entityId",
-      "eventId"
+      "identity.recordId",
+      "identity.targetId"
     ],
     "requiredExactlyOne": true,
-    "defaultIdField": "entityId"
+    "defaultIdField": "identity.recordId"
   },
   "defaults": {
     "canonicalContentType": "snapshots",
     "dataRoot": "data",
-    "effectiveDatePath": "capturedAt",
+    "effectiveDatePath": "lifecycle.capturedAt",
     "fallbackEffectiveDatePaths": [
+      "capturedAt",
       "snapshot.capturedAt",
       "data.enrichment.enrichedAt"
     ]
@@ -28,8 +29,9 @@
       "collection": "vulnerabilities-snapshots",
       "dataRoot": "data",
       "isCanonical": true,
-      "effectiveDatePath": "capturedAt",
+      "effectiveDatePath": "lifecycle.capturedAt",
       "fallbackEffectiveDatePaths": [
+        "capturedAt",
         "snapshot.capturedAt",
         "data.enrichment.enrichedAt"
       ]
@@ -40,7 +42,7 @@
       "label": "Vulnerability ID",
       "source": {
         "contentType": "snapshots",
-        "path": "data.vulnerabilityId"
+        "path": "sourceFacts.values.vulnerabilityId.rawValue"
       },
       "humanReadable": true,
       "sortable": true,
@@ -105,7 +107,7 @@
       "label": "Plugin ID",
       "source": {
         "contentType": "snapshots",
-        "path": "data.pluginId"
+        "path": "sourceFacts.values.pluginId.rawValue"
       },
       "humanReadable": true,
       "sortable": true,
@@ -118,7 +120,7 @@
       "label": "Plugin Name",
       "source": {
         "contentType": "snapshots",
-        "path": "data.pluginName"
+        "path": "data.vulnerabilityName"
       },
       "humanReadable": true,
       "sortable": true,
@@ -131,7 +133,7 @@
       "label": "Plugin Family",
       "source": {
         "contentType": "snapshots",
-        "path": "data.pluginFamily"
+        "path": "data.vulnerabilityFamily"
       },
       "humanReadable": true,
       "sortable": true,
@@ -153,31 +155,18 @@
       "item": true,
       "valueType": "string"
     },
-    "severityLevel": {
-      "label": "Severity Level",
+    "cveId": {
+      "label": "CVE",
       "source": {
         "contentType": "snapshots",
-        "path": "data.severityLevel"
+        "path": "data.cveId"
       },
       "humanReadable": true,
       "sortable": true,
       "filterable": true,
       "list": true,
       "item": true,
-      "valueType": "number"
-    },
-    "cveIds": {
-      "label": "CVEs",
-      "source": {
-        "contentType": "snapshots",
-        "path": "data.cveIds"
-      },
-      "humanReadable": true,
-      "sortable": false,
-      "filterable": true,
-      "list": true,
-      "item": true,
-      "valueType": "array"
+      "valueType": "string"
     },
     "riskLevel": {
       "label": "Risk Level",
@@ -385,7 +374,7 @@
       },
       "target": {
         "contentType": "snapshots",
-        "path": "data.ip_address"
+        "path": "data.assetIp"
       },
       "defaultMode": "extendFields",
       "targetFields": [
@@ -401,17 +390,17 @@
       "type": "manyToOne",
       "source": {
         "contentType": "snapshots",
-        "path": "data.pluginId"
+        "path": "sourceFacts.values.pluginId.rawValue"
       },
       "target": {
         "contentType": "snapshots",
-        "path": "data.plugin_id"
+        "path": "sourceFacts.values.plugin_id.rawValue"
       },
       "defaultMode": "extendFields",
       "targetFields": [
         "groupId",
         "pluginName",
-        "severityLevel",
+        "severity",
         "affectedEntitiesCount",
         "riskLevel",
         "priorityScore"