@x12i/memorix-retrieval 1.19.0 → 1.21.0

package/catalox-seeds/inputs/entity-descriptors/assets.json

@@ -7,19 +7,20 @@
   "collectionPrefix": "assets",
   "identity": {
     "allowedIdFields": [
-      "entityId",
-      "eventId"
+      "identity.recordId",
+      "identity.targetId"
     ],
     "requiredExactlyOne": true,
-    "defaultIdField": "entityId"
+    "defaultIdField": "identity.recordId"
   },
   "defaults": {
     "canonicalContentType": "snapshots",
     "dataRoot": "data",
-    "effectiveDatePath": "capturedAt",
+    "effectiveDatePath": "lifecycle.capturedAt",
     "fallbackEffectiveDatePaths": [
+      "capturedAt",
       "snapshot.capturedAt",
-      "data.xdr.last_seen"
+      "data.lastSeen"
     ]
   },
   "contentTypes": {
@@ -28,10 +29,11 @@
       "collection": "assets-snapshots",
       "dataRoot": "data",
       "isCanonical": true,
-      "effectiveDatePath": "capturedAt",
+      "effectiveDatePath": "lifecycle.capturedAt",
       "fallbackEffectiveDatePaths": [
+        "capturedAt",
         "snapshot.capturedAt",
-        "data.xdr.last_seen"
+        "data.lastSeen"
       ]
     }
   },
@@ -49,11 +51,37 @@
       "item": true,
       "valueType": "string"
     },
+    "subnetIp": {
+      "label": "Subnet IP",
+      "source": {
+        "contentType": "snapshots",
+        "path": "data.subnetIp"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": true,
+      "item": true,
+      "valueType": "string"
+    },
+    "subnetId": {
+      "label": "Subnet ID",
+      "source": {
+        "contentType": "snapshots",
+        "path": "data.subnetId"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": true,
+      "item": true,
+      "valueType": "string"
+    },
     "source": {
       "label": "Source",
       "source": {
         "contentType": "snapshots",
-        "path": "data._source"
+        "path": "sourceFacts.values._source.rawValue"
       },
       "humanReadable": true,
       "sortable": true,
@@ -66,7 +94,7 @@
       "label": "Host Name",
       "source": {
         "contentType": "snapshots",
-        "path": "data.xdr.host_name"
+        "path": "data.assetName"
       },
       "humanReadable": true,
       "sortable": true,
@@ -79,7 +107,7 @@
       "label": "XDR Operational Status",
       "source": {
         "contentType": "snapshots",
-        "path": "data.xdr.operational_status"
+        "path": "data.operationalStatus"
       },
       "humanReadable": true,
       "sortable": true,
@@ -92,7 +120,7 @@
       "label": "XDR Agent Status",
       "source": {
         "contentType": "snapshots",
-        "path": "data.xdr.agent_status"
+        "path": "data.agentStatus"
       },
       "humanReadable": true,
       "sortable": true,
@@ -105,7 +133,7 @@
       "label": "Agent Type",
       "source": {
         "contentType": "snapshots",
-        "path": "data.xdr.agent_type"
+        "path": "data.agentType"
       },
       "humanReadable": true,
       "sortable": true,
@@ -118,7 +146,7 @@
       "label": "Last Seen",
       "source": {
         "contentType": "snapshots",
-        "path": "data.xdr.last_seen"
+        "path": "data.lastSeen"
       },
       "humanReadable": true,
       "sortable": true,
@@ -127,24 +155,11 @@
       "item": true,
       "valueType": "datetime"
     },
-    "users": {
-      "label": "Users",
-      "source": {
-        "contentType": "snapshots",
-        "path": "data.xdr.users"
-      },
-      "humanReadable": true,
-      "sortable": false,
-      "filterable": true,
-      "list": true,
-      "item": true,
-      "valueType": "array"
-    },
     "hasVulnerabilities": {
       "label": "Has Vulnerabilities",
       "source": {
         "contentType": "snapshots",
-        "path": "data.vulnerabilities.hasVulnerabilities"
+        "path": "data.hasVulnerabilities"
       },
       "humanReadable": true,
       "sortable": true,
@@ -157,7 +172,7 @@
       "label": "Critical Vulnerabilities",
       "source": {
         "contentType": "snapshots",
-        "path": "data.vulnerabilities.count.critical"
+        "path": "analytics.vulnerabilities.critical"
       },
       "humanReadable": true,
       "sortable": true,
@@ -170,7 +185,7 @@
       "label": "High Vulnerabilities",
       "source": {
         "contentType": "snapshots",
-        "path": "data.vulnerabilities.count.high"
+        "path": "analytics.vulnerabilities.high"
       },
       "humanReadable": true,
       "sortable": true,
@@ -183,7 +198,7 @@
       "label": "Medium Vulnerabilities",
       "source": {
         "contentType": "snapshots",
-        "path": "data.vulnerabilities.count.medium"
+        "path": "analytics.vulnerabilities.medium"
       },
       "humanReadable": true,
       "sortable": true,
@@ -196,7 +211,7 @@
       "label": "Low Vulnerabilities",
       "source": {
         "contentType": "snapshots",
-        "path": "data.vulnerabilities.count.low"
+        "path": "analytics.vulnerabilities.low"
       },
       "humanReadable": true,
       "sortable": true,
@@ -209,7 +224,7 @@
       "label": "Potential Impact",
       "source": {
         "contentType": "snapshots",
-        "path": "data.potentialImpact.level"
+        "path": "insights.potentialImpact.level"
       },
       "humanReadable": true,
       "sortable": true,
@@ -222,7 +237,7 @@
       "label": "Impact Confidence",
       "source": {
         "contentType": "snapshots",
-        "path": "data.potentialImpact.confidence"
+        "path": "insights.potentialImpact.confidence"
       },
       "humanReadable": true,
       "sortable": true,
@@ -235,7 +250,7 @@
       "label": "Potential Impact Story",
       "source": {
         "contentType": "snapshots",
-        "path": "data.potentialImpact.story"
+        "path": "insights.potentialImpact.story"
       },
       "humanReadable": false,
       "sortable": false,
@@ -248,7 +263,7 @@
       "label": "Paths Count",
       "source": {
         "contentType": "snapshots",
-        "path": "data.pathsCount"
+        "path": "analytics.paths.total"
       },
       "humanReadable": true,
       "sortable": true,
@@ -261,7 +276,7 @@
       "label": "Raw XDR",
       "source": {
         "contentType": "snapshots",
-        "path": "data.xdr"
+        "path": "sourceFacts.values.xdrRaw.rawValue"
       },
       "humanReadable": false,
       "sortable": false,
@@ -272,6 +287,26 @@
     }
   },
   "relations": {
+    "assetSubnet": {
+      "targetEntity": "topology-subnets",
+      "type": "manyToOne",
+      "source": {
+        "contentType": "snapshots",
+        "path": "data.subnetId"
+      },
+      "target": {
+        "contentType": "snapshots",
+        "path": "data.subnetId"
+      },
+      "defaultMode": "record",
+      "targetFields": [
+        "subnetId",
+        "subnetIp",
+        "cidr",
+        "zone",
+        "vr"
+      ]
+    },
     "assetVulnerabilities": {
       "targetEntity": "vulnerabilities",
       "type": "oneToMany",
@@ -288,10 +323,10 @@
       "targetFields": [
         "vulnerabilityId",
         "pluginName",
-        "severityLevel",
+        "severity",
         "riskLevel",
         "priorityScore",
-        "cveIds"
+        "cveId"
       ]
     }
   }

package/catalox-seeds/inputs/entity-descriptors/topology-subnets.json

@@ -0,0 +1,127 @@
+{
+  "id": "topology-subnets",
+  "entityName": "topology-subnets",
+  "target": "entity",
+  "defaultListDescriptorId": "topology-subnets-main-list",
+  "defaultItemDescriptorId": "topology-subnet-detail-item",
+  "collectionPrefix": "topology-subnets",
+  "identity": {
+    "allowedIdFields": [
+      "entityId",
+      "recordId",
+      "_id"
+    ],
+    "requiredExactlyOne": false,
+    "defaultIdField": "entityId"
+  },
+  "defaults": {
+    "canonicalContentType": "snapshots",
+    "dataRoot": "data",
+    "effectiveDatePath": "capturedAt",
+    "fallbackEffectiveDatePaths": [
+      "modifiedAt",
+      "createdAt"
+    ]
+  },
+  "contentTypes": {
+    "snapshots": {
+      "postfix": "snapshots",
+      "collection": "topology-subnets-snapshots",
+      "isCanonical": true
+    }
+  },
+  "properties": {
+    "recordId": {
+      "label": "Record ID",
+      "source": {
+        "contentType": "snapshots",
+        "path": "recordId"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": true,
+      "item": true,
+      "valueType": "string"
+    },
+    "subnetIp": {
+      "label": "Subnet",
+      "source": {
+        "contentType": "snapshots",
+        "path": "data.subnetIp"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": true,
+      "item": true,
+      "valueType": "string"
+    },
+    "subnetId": {
+      "label": "Subnet ID",
+      "source": {
+        "contentType": "snapshots",
+        "path": "data.subnetId"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": true,
+      "item": true,
+      "valueType": "string"
+    },
+    "cidr": {
+      "label": "Subnet CIDR",
+      "source": {
+        "contentType": "snapshots",
+        "path": "data.cidr"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": true,
+      "item": true,
+      "valueType": "string"
+    },
+    "zone": {
+      "label": "Zone",
+      "source": {
+        "contentType": "snapshots",
+        "path": "data.zone"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": true,
+      "item": true,
+      "valueType": "string"
+    },
+    "zoneClass": {
+      "label": "Zone Class",
+      "source": {
+        "contentType": "snapshots",
+        "path": "data.zoneClass"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": false,
+      "item": true,
+      "valueType": "string"
+    },
+    "vr": {
+      "label": "VR",
+      "source": {
+        "contentType": "snapshots",
+        "path": "data.vr"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": true,
+      "item": true,
+      "valueType": "string"
+    }
+  },
+  "relations": {}
+}

package/catalox-seeds/inputs/entity-descriptors/vulnerabilities.json

@@ -7,17 +7,18 @@
   "collectionPrefix": "vulnerabilities",
   "identity": {
     "allowedIdFields": [
-      "entityId",
-      "eventId"
+      "identity.recordId",
+      "identity.targetId"
     ],
     "requiredExactlyOne": true,
-    "defaultIdField": "entityId"
+    "defaultIdField": "identity.recordId"
   },
   "defaults": {
     "canonicalContentType": "snapshots",
     "dataRoot": "data",
-    "effectiveDatePath": "capturedAt",
+    "effectiveDatePath": "lifecycle.capturedAt",
     "fallbackEffectiveDatePaths": [
+      "capturedAt",
       "snapshot.capturedAt",
       "data.enrichment.enrichedAt"
     ]
@@ -28,8 +29,9 @@
       "collection": "vulnerabilities-snapshots",
       "dataRoot": "data",
       "isCanonical": true,
-      "effectiveDatePath": "capturedAt",
+      "effectiveDatePath": "lifecycle.capturedAt",
       "fallbackEffectiveDatePaths": [
+        "capturedAt",
         "snapshot.capturedAt",
         "data.enrichment.enrichedAt"
       ]
@@ -40,7 +42,7 @@
       "label": "Vulnerability ID",
       "source": {
         "contentType": "snapshots",
-        "path": "data.vulnerabilityId"
+        "path": "sourceFacts.values.vulnerabilityId.rawValue"
       },
       "humanReadable": true,
       "sortable": true,
@@ -105,7 +107,7 @@
       "label": "Plugin ID",
       "source": {
         "contentType": "snapshots",
-        "path": "data.pluginId"
+        "path": "sourceFacts.values.pluginId.rawValue"
       },
       "humanReadable": true,
       "sortable": true,
@@ -118,7 +120,7 @@
       "label": "Plugin Name",
       "source": {
         "contentType": "snapshots",
-        "path": "data.pluginName"
+        "path": "data.vulnerabilityName"
       },
       "humanReadable": true,
       "sortable": true,
@@ -131,7 +133,7 @@
       "label": "Plugin Family",
       "source": {
         "contentType": "snapshots",
-        "path": "data.pluginFamily"
+        "path": "data.vulnerabilityFamily"
       },
       "humanReadable": true,
       "sortable": true,
@@ -153,31 +155,18 @@
       "item": true,
       "valueType": "string"
     },
-    "severityLevel": {
-      "label": "Severity Level",
+    "cveId": {
+      "label": "CVE",
       "source": {
         "contentType": "snapshots",
-        "path": "data.severityLevel"
+        "path": "data.cveId"
       },
       "humanReadable": true,
       "sortable": true,
       "filterable": true,
       "list": true,
       "item": true,
-      "valueType": "number"
-    },
-    "cveIds": {
-      "label": "CVEs",
-      "source": {
-        "contentType": "snapshots",
-        "path": "data.cveIds"
-      },
-      "humanReadable": true,
-      "sortable": false,
-      "filterable": true,
-      "list": true,
-      "item": true,
-      "valueType": "array"
+      "valueType": "string"
     },
     "riskLevel": {
       "label": "Risk Level",
@@ -385,7 +374,7 @@
       },
       "target": {
         "contentType": "snapshots",
-        "path": "data.ip_address"
+        "path": "data.assetIp"
       },
       "defaultMode": "extendFields",
       "targetFields": [
@@ -395,27 +384,6 @@
         "xdrAgentStatus",
         "potentialImpactLevel"
       ]
-    },
-    "vulnerabilityGroup": {
-      "targetEntity": "variabilities-groups",
-      "type": "manyToOne",
-      "source": {
-        "contentType": "snapshots",
-        "path": "data.pluginId"
-      },
-      "target": {
-        "contentType": "snapshots",
-        "path": "data.plugin_id"
-      },
-      "defaultMode": "extendFields",
-      "targetFields": [
-        "groupId",
-        "pluginName",
-        "severityLevel",
-        "affectedEntitiesCount",
-        "riskLevel",
-        "priorityScore"
-      ]
     }
   }
 }

package/catalox-seeds/inputs/item-descriptors/asset-detail-item.json

@@ -3,7 +3,7 @@
   "entity": "assets",
   "title": "Asset Detail",
   "identity": {
-    "idField": "entityId"
+    "idField": "identity.recordId"
   },
   "contentTypes": [
     {
@@ -11,10 +11,11 @@
       "required": true,
       "multiMatch": {
         "strategy": "last",
-        "effectiveDatePath": "capturedAt",
+        "effectiveDatePath": "lifecycle.capturedAt",
         "fallbackEffectiveDatePaths": [
+          "capturedAt",
           "snapshot.capturedAt",
-          "data.xdr.last_seen"
+          "data.lastSeen"
         ]
       }
     }
@@ -25,6 +26,8 @@
       "title": "Summary",
       "fields": [
         "ipAddress",
+        "subnetId",
+        "subnetIp",
         "hostName",
         "source",
         "agentType",
@@ -58,12 +61,23 @@
       "id": "xdr",
       "title": "XDR",
       "fields": [
-        "users",
         "rawXdr"
       ]
     }
   ],
   "includeRelations": [
+    {
+      "relation": "assetSubnet",
+      "mode": "record",
+      "limit": 1,
+      "fields": [
+        "subnetId",
+        "subnetIp",
+        "cidr",
+        "zone",
+        "vr"
+      ]
+    },
     {
       "relation": "assetVulnerabilities",
       "mode": "array",
@@ -72,10 +86,10 @@
       "fields": [
         "vulnerabilityId",
         "pluginName",
-        "severityLevel",
+        "severity",
         "riskLevel",
         "priorityScore",
-        "cveIds"
+        "cveId"
       ]
     }
   ],

package/catalox-seeds/inputs/item-descriptors/topology-subnet-detail-item.json

@@ -0,0 +1,41 @@
+{
+  "id": "topology-subnet-detail-item",
+  "entity": "topology-subnets",
+  "title": "Topology Subnet Detail",
+  "identity": {
+    "idField": "identity.recordId"
+  },
+  "contentTypes": [
+    {
+      "contentType": "snapshots",
+      "required": true,
+      "multiMatch": {
+        "strategy": "last",
+        "effectiveDatePath": "lifecycle.capturedAt",
+        "fallbackEffectiveDatePaths": [
+          "capturedAt",
+          "snapshot.capturedAt"
+        ]
+      }
+    }
+  ],
+  "sections": [
+    {
+      "id": "summary",
+      "title": "Summary",
+      "fields": [
+        "subnetId",
+        "subnetIp",
+        "cidr",
+        "zone",
+        "zoneClass",
+        "vr",
+        "recordId"
+      ]
+    }
+  ],
+  "includeRelations": [],
+  "content": {
+    "allowed": false
+  }
+}

package/catalox-seeds/inputs/item-descriptors/vulnerability-detail-item.json

@@ -3,7 +3,7 @@
   "entity": "vulnerabilities",
   "title": "Vulnerability Detail",
   "identity": {
-    "idField": "entityId"
+    "idField": "identity.recordId"
   },
   "contentTypes": [
     {
@@ -11,8 +11,9 @@
       "required": true,
       "multiMatch": {
         "strategy": "last",
-        "effectiveDatePath": "capturedAt",
+        "effectiveDatePath": "lifecycle.capturedAt",
         "fallbackEffectiveDatePaths": [
+          "capturedAt",
           "snapshot.capturedAt",
           "data.enrichment.enrichedAt"
         ]
@@ -28,8 +29,7 @@
         "pluginName",
         "pluginFamily",
         "severity",
-        "severityLevel",
-        "cveIds"
+        "cveId"
       ]
     },
     {
@@ -93,7 +93,7 @@
       "fields": [
         "groupId",
         "pluginName",
-        "severityLevel",
+        "severity",
         "affectedEntitiesCount",
         "riskLevel",
         "priorityScore"

package/catalox-seeds/inputs/list-descriptors/assets-main-list.json

@@ -11,6 +11,8 @@
   "filters": [],
   "fields": [
     "ipAddress",
+    "subnetId",
+    "subnetIp",
     "hostName",
     "source",
     "agentType",
@@ -26,6 +28,8 @@
   "includeRelations": [],
   "allowedSorts": [
     "ipAddress",
+    "subnetId",
+    "subnetIp",
     "hostName",
     "source",
     "agentType",