@x12i/memorix-retrieval 1.26.0 → 1.28.0

package/catalox-seeds/inputs/entity-descriptors/assets.json

@@ -64,16 +64,16 @@
       "item": true,
       "valueType": "string"
     },
-    "subnetId": {
-      "label": "Subnet ID",
+    "subnetCidr": {
+      "label": "Subnet CIDR",
       "source": {
         "contentType": "snapshots",
-        "path": "data.subnetId"
+        "path": "data.subnetCidr"
       },
       "humanReadable": true,
       "sortable": true,
       "filterable": true,
-      "list": true,
+      "list": false,
       "item": true,
       "valueType": "string"
     },
@@ -286,23 +286,49 @@
       "valueType": "object"
     }
   },
+  "associatedProperties": [
+    {
+      "name": "associatedData",
+      "contentType": "snapshots",
+      "kind": "associated",
+      "valueShape": "array<object>",
+      "linkedObjectType": "subnets",
+      "linkedContentType": "snapshots",
+      "description": "Subnet snapshot payloads copied from subnets-snapshots.data when asset data.subnetCidrs matches subnet data.cidr.",
+      "managed": true,
+      "refreshRuleKey": "assets.subnets.snapshots.by-cidr",
+      "sourceCollection": "subnets-snapshots"
+    },
+    {
+      "name": "associatedInferred",
+      "contentType": "snapshots",
+      "kind": "associated",
+      "valueShape": "array<object>",
+      "linkedObjectType": "subnets",
+      "linkedContentType": "inferences",
+      "description": "Subnet discovery payloads copied from subnets-inferences.data when asset data.subnetCidrs matches subnet data.cidr.",
+      "managed": true,
+      "refreshRuleKey": "assets.subnets.inferences.by-cidr",
+      "sourceCollection": "subnets-inferences"
+    }
+  ],
   "relations": {
     "assetSubnet": {
-      "targetEntity": "topology-subnets",
+      "targetEntity": "subnets",
       "type": "manyToOne",
       "source": {
         "contentType": "snapshots",
-        "path": "data.subnetId"
+        "path": "data.subnetCidrs"
       },
       "target": {
         "contentType": "snapshots",
-        "path": "data.subnetId"
+        "path": "data.cidr"
       },
-      "defaultMode": "record",
+      "defaultMode": "array",
+      "defaultArrayProperty": "associatedData",
       "targetFields": [
-        "subnetId",
-        "subnetIp",
         "cidr",
+        "subnetIp",
         "zone",
         "vr"
       ]
@@ -312,7 +338,7 @@
       "type": "oneToMany",
       "source": {
         "contentType": "snapshots",
-        "path": "data.ip_address"
+        "path": "data.assetIps"
       },
       "target": {
         "contentType": "snapshots",

package/catalox-seeds/inputs/entity-descriptors/subnets.json

@@ -0,0 +1,264 @@
+{
+  "id": "subnets",
+  "entityName": "subnets",
+  "target": "entity",
+  "defaultListDescriptorId": "subnets-main-list",
+  "defaultItemDescriptorId": "subnet-detail-item",
+  "collectionPrefix": "subnets",
+  "identity": {
+    "allowedIdFields": [
+      "entityId",
+      "recordId",
+      "_id"
+    ],
+    "requiredExactlyOne": false,
+    "defaultIdField": "entityId"
+  },
+  "defaults": {
+    "canonicalContentType": "snapshots",
+    "dataRoot": "data",
+    "effectiveDatePath": "capturedAt",
+    "fallbackEffectiveDatePaths": [
+      "modifiedAt",
+      "createdAt"
+    ]
+  },
+  "contentTypes": {
+    "snapshots": {
+      "postfix": "snapshots",
+      "collection": "subnets-snapshots",
+      "isCanonical": true
+    },
+    "core": {
+      "postfix": "core",
+      "collection": "subnets-core",
+      "isCanonical": false
+    },
+    "inferences": {
+      "postfix": "inferences",
+      "collection": "subnets-inferences",
+      "isCanonical": false
+    },
+    "scoped": {
+      "postfix": "scoped",
+      "collection": "subnets-scoped",
+      "isCanonical": false
+    },
+    "legacy": {
+      "postfix": "legacy",
+      "collection": "subnets-legacy",
+      "isCanonical": false
+    }
+  },
+  "properties": {
+    "recordId": {
+      "label": "Record ID",
+      "source": {
+        "contentType": "snapshots",
+        "path": "recordId"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": true,
+      "item": true,
+      "valueType": "string"
+    },
+    "cidr": {
+      "label": "Subnet CIDR",
+      "source": {
+        "contentType": "snapshots",
+        "path": "data.cidr"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": true,
+      "item": true,
+      "valueType": "string"
+    },
+    "subnetIp": {
+      "label": "Subnet network address",
+      "source": {
+        "contentType": "snapshots",
+        "path": "data.subnetIp"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": true,
+      "item": true,
+      "valueType": "string"
+    },
+    "zone": {
+      "label": "Zone",
+      "source": {
+        "contentType": "snapshots",
+        "path": "data.zone"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": true,
+      "item": true,
+      "valueType": "string"
+    },
+    "zoneClass": {
+      "label": "Zone Class",
+      "source": {
+        "contentType": "snapshots",
+        "path": "data.zoneClass"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": false,
+      "item": true,
+      "valueType": "string"
+    },
+    "vr": {
+      "label": "VR",
+      "source": {
+        "contentType": "snapshots",
+        "path": "data.vr"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": true,
+      "item": true,
+      "valueType": "string"
+    },
+    "outsideExposureClass": {
+      "label": "Outside Exposure",
+      "source": {
+        "contentType": "snapshots",
+        "path": "data.outsideExposureClass"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": false,
+      "item": true,
+      "valueType": "string"
+    },
+    "internalReachabilityClass": {
+      "label": "Internal Reachability",
+      "source": {
+        "contentType": "snapshots",
+        "path": "data.internalReachabilityClass"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": false,
+      "item": true,
+      "valueType": "string"
+    },
+    "remoteAccessAdjacent": {
+      "label": "Remote Access Adjacent",
+      "source": {
+        "contentType": "snapshots",
+        "path": "data.remoteAccessAdjacent"
+      },
+      "humanReadable": true,
+      "sortable": false,
+      "filterable": true,
+      "list": false,
+      "item": true,
+      "valueType": "boolean"
+    },
+    "partnerLinkAdjacent": {
+      "label": "Partner Link Adjacent",
+      "source": {
+        "contentType": "snapshots",
+        "path": "data.partnerLinkAdjacent"
+      },
+      "humanReadable": true,
+      "sortable": false,
+      "filterable": true,
+      "list": false,
+      "item": true,
+      "valueType": "boolean"
+    },
+    "dmzAdjacent": {
+      "label": "DMZ Adjacent",
+      "source": {
+        "contentType": "snapshots",
+        "path": "data.dmzAdjacent"
+      },
+      "humanReadable": true,
+      "sortable": false,
+      "filterable": true,
+      "list": false,
+      "item": true,
+      "valueType": "boolean"
+    },
+    "reachableFromZones": {
+      "label": "Reachable From Zones",
+      "source": {
+        "contentType": "snapshots",
+        "path": "data.reachableFromZones"
+      },
+      "humanReadable": true,
+      "sortable": false,
+      "filterable": false,
+      "list": false,
+      "item": true,
+      "valueType": "array"
+    },
+    "zoneMappingConfidence": {
+      "label": "Zone Mapping Confidence",
+      "source": {
+        "contentType": "snapshots",
+        "path": "data.zoneMappingConfidence"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": false,
+      "item": true,
+      "valueType": "number"
+    },
+    "quarantineLegacy": {
+      "label": "Legacy (quarantined)",
+      "source": {
+        "contentType": "legacy",
+        "path": "_system.quarantine.legacy"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": true,
+      "item": true,
+      "valueType": "boolean"
+    },
+    "legacySubnetIp": {
+      "label": "Legacy Subnet IP",
+      "source": {
+        "contentType": "legacy",
+        "path": "data.subnetIp"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": true,
+      "item": true,
+      "valueType": "string"
+    },
+    "quarantineReason": {
+      "label": "Quarantine Reason",
+      "source": {
+        "contentType": "legacy",
+        "path": "_system.quarantine.reason"
+      },
+      "humanReadable": true,
+      "sortable": false,
+      "filterable": true,
+      "list": false,
+      "item": true,
+      "valueType": "string"
+    }
+  },
+  "relations": {}
+}

package/catalox-seeds/inputs/entity-descriptors/vulnerabilities-groups.json

@@ -0,0 +1,136 @@
+{
+  "id": "vulnerabilities-groups",
+  "entityName": "vulnerabilities-groups",
+  "defaultListDescriptorId": "vulnerabilities-groups-main-list",
+  "defaultItemDescriptorId": "vulnerabilities-group-detail-item",
+  "target": "entity",
+  "collectionPrefix": "vulnerabilities-groups",
+  "identity": {
+    "allowedIdFields": [
+      "recordId",
+      "recordId"
+    ],
+    "requiredExactlyOne": true,
+    "defaultIdField": "recordId"
+  },
+  "defaults": {
+    "canonicalContentType": "snapshots",
+    "dataRoot": "data",
+    "effectiveDatePath": "capturedAt",
+    "fallbackEffectiveDatePaths": [
+      "modifiedAt",
+      "createdAt",
+      "data.enrichment.enrichedAt"
+    ]
+  },
+  "contentTypes": {
+    "snapshots": {
+      "postfix": "snapshots",
+      "collection": "vulnerabilities-groups-snapshots",
+      "dataRoot": "data",
+      "isCanonical": true
+    },
+    "inferences": {
+      "postfix": "inferences",
+      "collection": "vulnerabilities-groups-inferences",
+      "dataRoot": "data",
+      "isCanonical": false
+    },
+    "analysis": {
+      "postfix": "analysis",
+      "collection": "vulnerabilities-groups-analysis",
+      "dataRoot": "data",
+      "isCanonical": false
+    }
+  },
+  "properties": {
+    "name": {
+      "label": "Group Name",
+      "source": {
+        "contentType": "snapshots",
+        "path": "data.name"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": true,
+      "item": true,
+      "valueType": "string"
+    },
+    "pluginId": {
+      "label": "Plugin ID",
+      "source": {
+        "contentType": "snapshots",
+        "path": "data.pluginId"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": true,
+      "item": true,
+      "valueType": "number"
+    },
+    "cveId": {
+      "label": "CVE",
+      "source": {
+        "contentType": "snapshots",
+        "path": "data.cveId"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": true,
+      "item": true,
+      "valueType": "string"
+    },
+    "severity": {
+      "label": "Severity",
+      "source": {
+        "contentType": "snapshots",
+        "path": "data.severity"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": true,
+      "item": true,
+      "valueType": "string"
+    },
+    "compositeScore": {
+      "label": "Composite Score",
+      "source": {
+        "contentType": "snapshots",
+        "path": "enrichment.compositeScore"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": true,
+      "item": true,
+      "valueType": "number"
+    }
+  },
+  "associatedProperties": [],
+  "relations": {
+    "groupVulnerabilities": {
+      "targetEntity": "vulnerabilities",
+      "type": "oneToMany",
+      "source": {
+        "contentType": "snapshots",
+        "path": "data.name"
+      },
+      "target": {
+        "contentType": "snapshots",
+        "path": "data.vulnerabilityName"
+      },
+      "defaultMode": "array",
+      "defaultArrayProperty": "vulnerabilities",
+      "targetFields": [
+        "assetIp",
+        "severity",
+        "cveId",
+        "pluginName"
+      ]
+    }
+  }
+}

package/catalox-seeds/inputs/entity-descriptors/vulnerabilities.json

@@ -364,6 +364,56 @@
       "valueType": "object"
     }
   },
+  "associatedProperties": [
+    {
+      "name": "associatedData",
+      "contentType": "snapshots",
+      "kind": "associated",
+      "valueShape": "array<object>",
+      "linkedObjectType": "vulnerabilities-groups",
+      "linkedContentType": "snapshots",
+      "description": "Vulnerability group snapshot payloads copied from vulnerabilities-groups-snapshots.data when data.vulnerabilityName matches group data.name.",
+      "managed": true,
+      "refreshRuleKey": "vulnerabilities.vulnerability-groups.snapshots.by-name",
+      "sourceCollection": "vulnerabilities-groups-snapshots"
+    },
+    {
+      "name": "associatedInferred",
+      "contentType": "snapshots",
+      "kind": "associated",
+      "valueShape": "array<object>",
+      "linkedObjectType": "vulnerabilities-groups",
+      "linkedContentType": "inferences",
+      "description": "Vulnerability group discovery payloads copied from vulnerabilities-groups-inferences.data via group name bridge.",
+      "managed": true,
+      "refreshRuleKey": "vulnerabilities.vulnerability-groups.inferences.by-name",
+      "sourceCollection": "vulnerabilities-groups-inferences"
+    },
+    {
+      "name": "associatedAnalysis",
+      "contentType": "snapshots",
+      "kind": "associated",
+      "valueShape": "array<object>",
+      "linkedObjectType": "vulnerabilities-groups",
+      "linkedContentType": "analysis",
+      "description": "Vulnerability group analysis payloads copied from vulnerabilities-groups-analysis.data via group name bridge.",
+      "managed": true,
+      "refreshRuleKey": "vulnerabilities.vulnerability-groups.analysis.by-name",
+      "sourceCollection": "vulnerabilities-groups-analysis"
+    },
+    {
+      "name": "associatedAssets",
+      "contentType": "snapshots",
+      "kind": "associated",
+      "valueShape": "array<object>",
+      "linkedObjectType": "assets",
+      "linkedContentType": "snapshots",
+      "description": "Optional asset snapshot payloads copied from assets-snapshots.data when data.assetIp matches asset data.assetIps.",
+      "managed": true,
+      "refreshRuleKey": "vulnerabilities.assets.snapshots.by-assetIp",
+      "sourceCollection": "assets-snapshots"
+    }
+  ],
   "relations": {
     "affectedAsset": {
       "targetEntity": "assets",
@@ -374,9 +424,10 @@
       },
       "target": {
         "contentType": "snapshots",
-        "path": "data.assetIp"
+        "path": "data.assetIps"
       },
-      "defaultMode": "extendFields",
+      "defaultMode": "array",
+      "defaultArrayProperty": "associatedAssets",
       "targetFields": [
         "ipAddress",
         "hostName",
@@ -384,6 +435,27 @@
         "xdrAgentStatus",
         "potentialImpactLevel"
       ]
+    },
+    "vulnerabilityGroup": {
+      "targetEntity": "vulnerabilities-groups",
+      "type": "manyToOne",
+      "source": {
+        "contentType": "snapshots",
+        "path": "data.vulnerabilityName"
+      },
+      "target": {
+        "contentType": "snapshots",
+        "path": "data.name"
+      },
+      "defaultMode": "array",
+      "defaultArrayProperty": "associatedData",
+      "targetFields": [
+        "name",
+        "severity",
+        "pluginId",
+        "cveId",
+        "vulnerability_family"
+      ]
     }
   }
 }

package/catalox-seeds/inputs/item-descriptors/asset-detail-item.json

@@ -26,8 +26,8 @@
       "title": "Summary",
       "fields": [
         "ipAddress",
-        "subnetId",
         "subnetIp",
+        "subnetCidr",
         "hostName",
         "source",
         "agentType",
@@ -71,9 +71,8 @@
       "mode": "record",
       "limit": 1,
       "fields": [
-        "subnetId",
-        "subnetIp",
         "cidr",
+        "subnetIp",
         "zone",
         "vr"
       ]

package/catalox-seeds/inputs/item-descriptors/subnet-detail-item.json

@@ -0,0 +1,74 @@
+{
+  "id": "subnet-detail-item",
+  "entity": "subnets",
+  "title": "Subnet Detail",
+  "identity": {
+    "idField": "recordId"
+  },
+  "contentTypes": [
+    {
+      "contentType": "snapshots",
+      "required": false,
+      "multiMatch": {
+        "strategy": "last",
+        "effectiveDatePath": "capturedAt",
+        "fallbackEffectiveDatePaths": [
+          "modifiedAt",
+          "createdAt"
+        ]
+      }
+    },
+    {
+      "contentType": "legacy",
+      "required": false,
+      "multiMatch": {
+        "strategy": "last",
+        "effectiveDatePath": "capturedAt",
+        "fallbackEffectiveDatePaths": [
+          "modifiedAt",
+          "createdAt"
+        ]
+      }
+    }
+  ],
+  "sections": [
+    {
+      "id": "summary",
+      "title": "Summary",
+      "fields": [
+        "cidr",
+        "subnetIp",
+        "zone",
+        "zoneClass",
+        "vr",
+        "recordId"
+      ]
+    },
+    {
+      "id": "reachability",
+      "title": "Reachability & Exposure",
+      "fields": [
+        "outsideExposureClass",
+        "internalReachabilityClass",
+        "remoteAccessAdjacent",
+        "partnerLinkAdjacent",
+        "dmzAdjacent",
+        "reachableFromZones",
+        "zoneMappingConfidence"
+      ]
+    },
+    {
+      "id": "legacy",
+      "title": "Legacy (quarantined)",
+      "fields": [
+        "quarantineLegacy",
+        "legacySubnetIp",
+        "quarantineReason"
+      ]
+    }
+  ],
+  "includeRelations": [],
+  "content": {
+    "allowed": false
+  }
+}

package/catalox-seeds/inputs/list-descriptors/assets-main-list.json

@@ -11,8 +11,8 @@
   "filters": [],
   "fields": [
     "ipAddress",
-    "subnetId",
     "subnetIp",
+    "subnetCidr",
     "hostName",
     "source",
     "agentType",
@@ -28,8 +28,8 @@
   "includeRelations": [],
   "allowedSorts": [
     "ipAddress",
-    "subnetId",
     "subnetIp",
+    "subnetCidr",
     "hostName",
     "source",
     "agentType",