@x12i/memorix-retrieval 1.30.0 → 1.32.0

package/catalox-seeds/inputs/entity-descriptors/subnets.json

@@ -29,14 +29,9 @@
       "collection": "subnets-snapshots",
       "isCanonical": true
     },
-    "core": {
-      "postfix": "core",
-      "collection": "subnets-core",
-      "isCanonical": false
-    },
-    "inferences": {
-      "postfix": "inferences",
-      "collection": "subnets-inferences",
+    "discovery": {
+      "postfix": "discovery",
+      "collection": "subnets-discovery",
       "isCanonical": false
     },
     "scoped": {
@@ -48,6 +43,24 @@
       "postfix": "legacy",
       "collection": "subnets-legacy",
       "isCanonical": false
+    },
+    "analysis": {
+      "postfix": "analysis",
+      "collection": "subnets-analysis",
+      "dataRoot": "data",
+      "isCanonical": false
+    }
+  },
+  "rootProperties": {
+    "possiblePaths": {
+      "label": "Possible Paths",
+      "source": {
+        "contentType": "snapshots",
+        "path": "possiblePaths"
+      },
+      "valueShape": "object",
+      "description": "Subnet-specific topology path facts stored at the snapshot root.",
+      "managed": true
     }
   },
   "properties": {
@@ -272,6 +285,100 @@
       "item": true,
       "valueType": "string"
     },
+    "assetsCount": {
+      "label": "Assets #",
+      "source": {
+        "contentType": "snapshots",
+        "path": "analytics.assets.total"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": true,
+      "item": true,
+      "valueType": "number",
+      "format": "count"
+    },
+    "findingsCount": {
+      "label": "Findings #",
+      "source": {
+        "contentType": "snapshots",
+        "path": "analytics.findings.total"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": true,
+      "item": true,
+      "valueType": "number",
+      "format": "count"
+    },
+    "vulnerabilitiesCount": {
+      "label": "Vulnerabilities #",
+      "source": {
+        "contentType": "snapshots",
+        "path": "analytics.vulnerabilities.total"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": true,
+      "item": true,
+      "valueType": "number",
+      "format": "count"
+    },
+    "criticalVulnerabilities": {
+      "label": "Critical Vulnerabilities",
+      "source": {
+        "contentType": "snapshots",
+        "path": "analytics.vulnerabilities.critical"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": true,
+      "item": true,
+      "valueType": "number"
+    },
+    "highVulnerabilities": {
+      "label": "High Vulnerabilities",
+      "source": {
+        "contentType": "snapshots",
+        "path": "analytics.vulnerabilities.high"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": true,
+      "item": true,
+      "valueType": "number"
+    },
+    "mediumVulnerabilities": {
+      "label": "Medium Vulnerabilities",
+      "source": {
+        "contentType": "snapshots",
+        "path": "analytics.vulnerabilities.medium"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": true,
+      "item": true,
+      "valueType": "number"
+    },
+    "lowVulnerabilities": {
+      "label": "Low Vulnerabilities",
+      "source": {
+        "contentType": "snapshots",
+        "path": "analytics.vulnerabilities.low"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": true,
+      "item": true,
+      "valueType": "number"
+    },
     "quarantineReason": {
       "label": "Quarantine Reason",
       "source": {
@@ -284,11 +391,75 @@
       "list": false,
       "item": true,
       "valueType": "string"
+    },
+    "analysisOverview": {
+      "label": "Overview",
+      "source": { "contentType": "analysis", "path": "data.overview" },
+      "humanReadable": false,
+      "list": false,
+      "item": true,
+      "valueType": "object"
+    },
+    "analysisOverviewSummary": {
+      "label": "Overview Summary",
+      "source": { "contentType": "analysis", "path": "data.overview.summary" },
+      "humanReadable": true,
+      "list": true,
+      "item": true,
+      "valueType": "string"
+    },
+    "analysisRole": {
+      "label": "Role",
+      "source": { "contentType": "analysis", "path": "data.cyberRoleInterpretation" },
+      "humanReadable": false,
+      "list": false,
+      "item": true,
+      "valueType": "object"
+    },
+    "analysisExposure": {
+      "label": "Exposure",
+      "source": { "contentType": "analysis", "path": "data.externalAndLowerTrustReachability" },
+      "humanReadable": false,
+      "list": false,
+      "item": true,
+      "valueType": "object"
+    },
+    "analysisTrust": {
+      "label": "Trust",
+      "source": { "contentType": "analysis", "path": "data.trustPositionInterpretation" },
+      "humanReadable": false,
+      "list": false,
+      "item": true,
+      "valueType": "object"
+    },
+    "analysisAttackPath": {
+      "label": "Attack Path",
+      "source": { "contentType": "analysis", "path": "data.possibleAttackPathAnalysis" },
+      "humanReadable": false,
+      "list": false,
+      "item": true,
+      "valueType": "object"
+    },
+    "analysisMovement": {
+      "label": "Movement",
+      "source": { "contentType": "analysis", "path": "data.outboundAndBlastPathInterpretation" },
+      "humanReadable": false,
+      "list": false,
+      "item": true,
+      "valueType": "object"
+    },
+    "analysisContext": {
+      "label": "Context",
+      "source": { "contentType": "analysis", "path": "data.aggregateContextInterpretation" },
+      "humanReadable": false,
+      "list": false,
+      "item": true,
+      "valueType": "object"
     }
   },
   "associatedProperties": [
     {
-      "name": "associatedChildren",
+      "name": "associatedAssetsSnapshots",
       "contentType": "snapshots",
       "kind": "associated",
       "valueShape": "array<object>",
@@ -298,7 +469,94 @@
       "managed": true,
       "refreshRuleKey": "subnets.assets.snapshots.by-cidr",
       "sourceCollection": "assets-snapshots"
+    },
+    {
+      "name": "associatedTopologyZonesAnalysis",
+      "contentType": "snapshots",
+      "kind": "associated",
+      "valueShape": "array<object>",
+      "linkedObjectType": "topology-zones",
+      "linkedContentType": "analysis",
+      "description": "Zone cyber-analysis joined from subnet data.zone to topology-zones-analysis.data.name.",
+      "managed": true,
+      "refreshRuleKey": "subnets.topology-zones.analysis.by-zone-name",
+      "sourceCollection": "topology-zones-analysis"
     }
   ],
+  "processing": {
+    "entityRoutes": [
+      {
+        "routeKey": "zones-to-subnets",
+        "parentObjectType": "topology-zones",
+        "childObjectType": "subnets",
+        "relationshipName": "subnetZone",
+        "direction": "parentToChild",
+        "source": {
+          "contentType": "snapshots",
+          "path": "data.zone"
+        },
+        "target": {
+          "contentType": "snapshots",
+          "path": "data.name"
+        }
+      }
+    ],
+    "resolvers": [
+      {
+        "processorId": "subnets.subnet-key",
+        "resolverType": "subnet-key",
+        "kind": "function",
+        "config": {
+          "mode": "from-cidr",
+          "sourcePath": "data.cidr"
+        }
+      },
+      {
+        "processorId": "subnets.zone-from-topology",
+        "resolverType": "zone-from-topology",
+        "kind": "function",
+        "config": {
+          "onlyWhenZoneIs": "UNKNOWN",
+          "topologyRaw": {
+            "db": "memorix-knowledge",
+            "collection": "topology-raw"
+          },
+          "zonesRegistry": {
+            "db": "neo-memorix-entities",
+            "collection": "topology-zones-snapshots"
+          }
+        }
+      }
+    ],
+    "insightStages": [
+      {
+        "processorId": "network.cidr-topology-path-resolver",
+        "kind": "function",
+        "inputKind": "cidr",
+        "outputKind": "cidr-path-facts",
+        "writeToInsights": false,
+        "sources": {
+          "topologyDb": "memorix-knowledge",
+          "topologyCollection": "topology-raw"
+        }
+      },
+      {
+        "processorId": "network.cidr-zone-path-insights",
+        "kind": "function",
+        "inputKind": "cidr-path-facts",
+        "outputKind": "insights",
+        "writeToInsights": true,
+        "sources": {
+          "zonesCollection": "topology-zones-snapshots"
+        }
+      }
+    ],
+    "associatedContent": {
+      "rollParentSnapshots": true,
+      "excludePostfixes": [
+        "raw"
+      ]
+    }
+  },
   "relations": {}
 }

package/catalox-seeds/inputs/entity-descriptors/topology-zones.json

@@ -0,0 +1,85 @@
+{
+  "id": "topology-zones",
+  "entityName": "topology-zones",
+  "defaultListDescriptorId": "topology-zones-main-list",
+  "defaultItemDescriptorId": "topology-zone-detail-item",
+  "target": "entity",
+  "collectionPrefix": "topology-zones",
+  "identity": {
+    "allowedIdFields": ["recordId"],
+    "requiredExactlyOne": true,
+    "defaultIdField": "recordId",
+    "conceptIdentifier": {
+      "kind": "zoneName",
+      "path": "concept.identifier.zoneName"
+    }
+  },
+  "defaults": {
+    "canonicalContentType": "snapshots",
+    "dataRoot": "data",
+    "effectiveDatePath": "capturedAt",
+    "fallbackEffectiveDatePaths": []
+  },
+  "contentTypes": {
+    "snapshots": {
+      "postfix": "snapshots",
+      "collection": "topology-zones-snapshots",
+      "isCanonical": true
+    },
+    "analysis": {
+      "postfix": "analysis",
+      "collection": "topology-zones-analysis",
+      "isCanonical": false
+    },
+    "core": {
+      "postfix": "core",
+      "collection": "topology-zones-core",
+      "isCanonical": false
+    }
+  },
+  "properties": {
+    "name": {
+      "label": "Zone Name",
+      "source": { "contentType": "snapshots", "path": "data.name" },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": true,
+      "item": true,
+      "valueType": "string"
+    },
+    "zoneClass": {
+      "label": "Zone Class",
+      "source": { "contentType": "snapshots", "path": "data.zoneClass" },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": true,
+      "item": true,
+      "valueType": "string"
+    },
+    "apparentRole": {
+      "label": "Apparent Role",
+      "source": { "contentType": "analysis", "path": "data.apparentRole" },
+      "humanReadable": true,
+      "sortable": false,
+      "filterable": true,
+      "list": false,
+      "item": true,
+      "valueType": "string"
+    },
+    "shortAnalysis": {
+      "label": "Short Analysis",
+      "source": { "contentType": "analysis", "path": "data.shortAnalysis" },
+      "humanReadable": true,
+      "sortable": false,
+      "filterable": false,
+      "list": false,
+      "item": true,
+      "valueType": "string"
+    }
+  },
+  "associatedProperties": [],
+  "processing": {},
+  "relations": {}
+}

package/catalox-seeds/inputs/entity-descriptors/vulnerabilities-groups.json

@@ -30,9 +30,9 @@
       "dataRoot": "data",
       "isCanonical": true
     },
-    "inferences": {
-      "postfix": "inferences",
-      "collection": "vulnerabilities-groups-inferences",
+    "discovery": {
+      "postfix": "discovery",
+      "collection": "vulnerabilities-groups-discovery",
       "dataRoot": "data",
       "isCanonical": false
     },
@@ -108,9 +108,270 @@
       "list": true,
       "item": true,
       "valueType": "number"
+    },
+    "affectedEntitiesCount": {
+      "label": "Affected #",
+      "source": {
+        "contentType": "snapshots",
+        "path": "analytics.affectedAssets.total"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": false,
+      "list": true,
+      "item": true,
+      "valueType": "number",
+      "format": "count"
+    },
+    "findingsCount": {
+      "label": "Findings #",
+      "source": {
+        "contentType": "snapshots",
+        "path": "analytics.findings.total"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": false,
+      "list": true,
+      "item": true,
+      "valueType": "number",
+      "format": "count"
+    },
+    "vulnerabilitiesCount": {
+      "label": "Vulnerabilities #",
+      "source": {
+        "contentType": "snapshots",
+        "path": "analytics.vulnerabilities.total"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": false,
+      "list": true,
+      "item": true,
+      "valueType": "number",
+      "format": "count"
+    },
+    "criticalVulnerabilities": {
+      "label": "Critical Vulnerabilities",
+      "source": {
+        "contentType": "snapshots",
+        "path": "analytics.vulnerabilities.critical"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": false,
+      "list": true,
+      "item": true,
+      "valueType": "number"
+    },
+    "highVulnerabilities": {
+      "label": "High Vulnerabilities",
+      "source": {
+        "contentType": "snapshots",
+        "path": "analytics.vulnerabilities.high"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": false,
+      "list": true,
+      "item": true,
+      "valueType": "number"
+    },
+    "mediumVulnerabilities": {
+      "label": "Medium Vulnerabilities",
+      "source": {
+        "contentType": "snapshots",
+        "path": "analytics.vulnerabilities.medium"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": false,
+      "list": true,
+      "item": true,
+      "valueType": "number"
+    },
+    "lowVulnerabilities": {
+      "label": "Low Vulnerabilities",
+      "source": {
+        "contentType": "snapshots",
+        "path": "analytics.vulnerabilities.low"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": false,
+      "list": true,
+      "item": true,
+      "valueType": "number"
+    },
+    "riskLevel": {
+      "label": "Risk Level",
+      "source": {
+        "contentType": "snapshots",
+        "path": "data.enrichment.riskLevel"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": true,
+      "item": true,
+      "valueType": "string"
+    },
+    "priorityScore": {
+      "label": "Priority Score",
+      "source": {
+        "contentType": "snapshots",
+        "path": "data.enrichment.priorityScore"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": true,
+      "item": true,
+      "valueType": "number"
+    },
+    "knownExploited": {
+      "label": "Known Exploited (KEV)",
+      "source": {
+        "contentType": "snapshots",
+        "path": "data.enrichment.knownExploited"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": true,
+      "item": true,
+      "valueType": "string"
+    },
+    "vulnerabilityType": {
+      "label": "Type",
+      "source": {
+        "contentType": "snapshots",
+        "path": "data.vulnerability_type"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": true,
+      "item": true,
+      "valueType": "string"
+    },
+    "analysisBriefSummary": {
+      "label": "Brief Summary",
+      "source": { "contentType": "analysis", "path": "data.brief.summary" },
+      "humanReadable": true,
+      "list": true,
+      "item": true,
+      "valueType": "string"
+    },
+    "analysisBriefAnalysis": {
+      "label": "Brief Analysis",
+      "source": { "contentType": "analysis", "path": "data.brief.analysis" },
+      "humanReadable": true,
+      "list": true,
+      "item": true,
+      "valueType": "string"
+    },
+    "analysisBriefEvidence": {
+      "label": "Brief Evidence",
+      "source": { "contentType": "analysis", "path": "data.brief.evidence" },
+      "humanReadable": true,
+      "list": false,
+      "item": true,
+      "valueType": "string"
+    },
+    "analysisBriefGaps": {
+      "label": "Brief Gaps",
+      "source": { "contentType": "analysis", "path": "data.brief.gaps" },
+      "humanReadable": true,
+      "list": false,
+      "item": true,
+      "valueType": "string"
+    },
+    "analysisApplicability": {
+      "label": "Applicability",
+      "source": { "contentType": "analysis", "path": "data.applicability" },
+      "humanReadable": false,
+      "list": false,
+      "item": true,
+      "valueType": "object"
+    },
+    "analysisExploitability": {
+      "label": "Exploitability",
+      "source": { "contentType": "analysis", "path": "data.exploitability" },
+      "humanReadable": false,
+      "list": false,
+      "item": true,
+      "valueType": "object"
+    },
+    "analysisImpact": {
+      "label": "Impact",
+      "source": { "contentType": "analysis", "path": "data.impact" },
+      "humanReadable": false,
+      "list": false,
+      "item": true,
+      "valueType": "object"
+    },
+    "analysisThreat": {
+      "label": "Threat",
+      "source": { "contentType": "analysis", "path": "data.threat" },
+      "humanReadable": false,
+      "list": false,
+      "item": true,
+      "valueType": "object"
+    },
+    "analysisMitre": {
+      "label": "MITRE",
+      "source": { "contentType": "analysis", "path": "data.mitre" },
+      "humanReadable": false,
+      "list": false,
+      "item": true,
+      "valueType": "array"
     }
   },
   "associatedProperties": [],
+  "narratives": {
+    "has-none-severity": {
+      "label": "None severity",
+      "kind": "association-common-property",
+      "sourceRef": "severity",
+      "property": "severity",
+      "value": "none"
+    },
+    "has-low-severity": {
+      "label": "Low severity",
+      "kind": "association-common-property",
+      "sourceRef": "severity",
+      "property": "severity",
+      "value": "low"
+    },
+    "has-medium-severity": {
+      "label": "Medium severity",
+      "kind": "association-common-property",
+      "sourceRef": "severity",
+      "property": "severity",
+      "value": "medium"
+    },
+    "has-high-severity": {
+      "label": "High severity",
+      "kind": "association-common-property",
+      "sourceRef": "severity",
+      "property": "severity",
+      "value": "high"
+    },
+    "has-critical-severity": {
+      "label": "Critical severity",
+      "kind": "association-common-property",
+      "sourceRef": "severity",
+      "property": "severity",
+      "value": "critical"
+    }
+  },
+  "processing": {
+    "associatedContent": {
+      "rollParentSnapshots": false,
+      "excludePostfixes": ["raw"]
+    }
+  },
   "relations": {
     "groupVulnerabilities": {
       "targetEntity": "vulnerabilities",