@x12i/memorix-retrieval 1.34.0 → 1.36.0

package/catalox-seeds/inputs/entity-descriptors/assets.json

@@ -82,6 +82,32 @@
       "item": true,
       "valueType": "array"
     },
+    "subnetCidr": {
+      "label": "Subnet CIDR",
+      "source": {
+        "contentType": "snapshots",
+        "path": "data.subnetCidrs.0"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": true,
+      "item": true,
+      "valueType": "string"
+    },
+    "subnetIp": {
+      "label": "Subnet IP",
+      "source": {
+        "contentType": "snapshots",
+        "path": "data.subnets.0.networkAddress"
+      },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": true,
+      "item": true,
+      "valueType": "string"
+    },
     "subnets": {
       "label": "Resolved Subnets",
       "source": {
@@ -438,6 +464,46 @@
       "list": true,
       "item": true,
       "valueType": "number"
+    },
+    "impactDecisionLabel": {
+      "label": "Impact Decision",
+      "source": { "contentType": "decisions", "path": "data.impactDecision.decision" },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": true,
+      "item": true,
+      "valueType": "string"
+    },
+    "impactDecisionStatus": {
+      "label": "Impact Decision Status",
+      "source": { "contentType": "decisions", "path": "data.impactDecision.status" },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": true,
+      "item": true,
+      "valueType": "string"
+    },
+    "impactDecisionRiskScore": {
+      "label": "Impact Decision Score",
+      "source": { "contentType": "decisions", "path": "data.impactDecision.riskScore" },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": true,
+      "item": true,
+      "valueType": "number"
+    },
+    "impactDecisionUrgencyScore": {
+      "label": "Impact Urgency Score",
+      "source": { "contentType": "decisions", "path": "data.impactDecision.urgencyScore" },
+      "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
+      "list": true,
+      "item": true,
+      "valueType": "number"
     }
   },
   "associatedProperties": [
@@ -768,5 +834,77 @@
         "cveId"
       ]
     }
+  },
+  "graph": {
+    "node": {
+      "kind": "ipAddress",
+      "directoryFields": ["ipAddress", "hostType", "zones"],
+      "contentLenses": ["snapshot", "analysis", "decisions"],
+      "ui": { "icon": "server" }
+    },
+    "edgeTemplates": [
+      {
+        "id": "asset-topology-associated",
+        "source": { "kind": "associatedArray", "key": "associatedTopology" },
+        "edges": [
+          {
+            "type": "containedIn",
+            "from": { "source": "concept" },
+            "to": { "source": "itemField", "field": "cidr", "kind": "cidr" },
+            "toObjectType": "subnets",
+            "toKind": "cidr",
+            "when": { "itemFieldExists": "cidr" }
+          },
+          {
+            "type": "inZone",
+            "from": { "source": "itemField", "field": "cidr", "kind": "cidr" },
+            "to": { "source": "itemField", "field": "zone", "kind": "zoneName" },
+            "toObjectType": "topology-zones",
+            "toKind": "zoneName",
+            "when": { "itemFieldExists": "zone" }
+          },
+          {
+            "type": "reachableFrom",
+            "from": { "source": "itemArrayField", "field": "reachableFromZones", "kind": "zoneName" },
+            "to": { "source": "itemField", "field": "zone", "kind": "zoneName" },
+            "toObjectType": "topology-zones",
+            "toKind": "zoneName",
+            "when": { "itemFieldExists": "zone" }
+          },
+          {
+            "type": "pathBridge",
+            "from": { "source": "literal", "kind": "zoneName", "value": "OUTSIDE" },
+            "to": { "source": "itemField", "field": "zone", "kind": "zoneName" },
+            "toObjectType": "topology-zones",
+            "toKind": "zoneName",
+            "synthesizePath": { "titleTemplate": "{from} → {to}" },
+            "when": {
+              "itemFieldExists": "zone",
+              "itemArrayIncludes": { "field": "reachableFromZones", "value": "OUTSIDE" }
+            }
+          }
+        ]
+      },
+      {
+        "id": "asset-vulnerabilities-by-ip",
+        "source": {
+          "kind": "queryByField",
+          "objectType": "vulnerabilities",
+          "sourcePath": "data.assetIp",
+          "targetPath": "data.assetIp",
+          "limit": 50
+        },
+        "edges": [
+          {
+            "type": "affectsAsset",
+            "from": { "source": "relatedConcept" },
+            "to": { "source": "concept" },
+            "toObjectType": "vulnerabilities",
+            "toKind": "hostVulnerability",
+            "neighbor": "from"
+          }
+        ]
+      }
+    ]
   }
 }

package/catalox-seeds/inputs/entity-descriptors/subnets.json

@@ -558,5 +558,20 @@
       ]
     }
   },
-  "relations": {}
+  "relations": {},
+  "graph": {
+    "node": {
+      "kind": "cidr",
+      "directoryFields": ["cidr", "zone"],
+      "contentLenses": ["snapshot", "analysis"],
+      "ui": { "icon": "network" }
+    },
+    "edgeTemplates": [
+      {
+        "id": "subnet-path-facts",
+        "source": { "kind": "pathFacts", "key": "possiblePaths" },
+        "edges": []
+      }
+    ]
+  }
 }

package/catalox-seeds/inputs/entity-descriptors/topology-zones.json

@@ -81,5 +81,13 @@
   },
   "associatedProperties": [],
   "processing": {},
-  "relations": {}
+  "relations": {},
+  "graph": {
+    "node": {
+      "kind": "zoneName",
+      "directoryFields": ["name"],
+      "contentLenses": ["snapshot", "analysis"],
+      "ui": { "icon": "shield" }
+    }
+  }
 }

package/catalox-seeds/inputs/entity-descriptors/vulnerabilities-groups.json

@@ -306,8 +306,8 @@
     "analysisImpact": {
       "label": "Impact",
       "source": { "contentType": "analysis", "path": "data.impact" },
-      "humanReadable": false,
-      "list": false,
+      "humanReadable": true,
+      "list": true,
       "item": true,
       "valueType": "object"
     },
@@ -393,5 +393,13 @@
         "pluginName"
       ]
     }
+  },
+  "graph": {
+    "node": {
+      "kind": "pluginId",
+      "directoryFields": ["name", "severity", "pluginId", "cveId"],
+      "contentLenses": ["snapshot", "analysis"],
+      "ui": { "icon": "bug" }
+    }
   }
 }

package/catalox-seeds/inputs/entity-descriptors/vulnerabilities.json

@@ -442,8 +442,8 @@
     "analysisImpact": {
       "label": "Impact",
       "source": { "contentType": "analysis", "path": "data.impact" },
-      "humanReadable": false,
-      "list": false,
+      "humanReadable": true,
+      "list": true,
       "item": true,
       "valueType": "object"
     },
@@ -475,6 +475,8 @@
       "label": "Exploitability Level (analysis)",
       "source": { "contentType": "analysis", "path": "data.exploitability.exploitability" },
       "humanReadable": true,
+      "sortable": true,
+      "filterable": true,
       "list": true,
       "item": true,
       "valueType": "string"
@@ -719,14 +721,14 @@
       "displayName": "Vulnerability",
       "description": "Security-impacting scanner result (severity low/medium/high/critical).",
       "kind": "product-narrative",
-      "visibility": "user"
+      "visibility": "internal"
     },
     "is-finding": {
       "label": "Is finding",
       "displayName": "Informational finding",
       "description": "Informational scanner result (severity none/unknown).",
       "kind": "product-narrative",
-      "visibility": "user"
+      "visibility": "internal"
     },
     "has-analysis": {
       "label": "Has analysis",
@@ -762,7 +764,7 @@
       "label": "Has triage decision",
       "displayName": "Triaged",
       "kind": "rollup",
-      "visibility": "user"
+      "visibility": "internal"
     },
     "has-breach-vector": {
       "label": "Breach vector",
@@ -856,5 +858,55 @@
         "vulnerability_family"
       ]
     }
+  },
+  "graph": {
+    "node": {
+      "kind": "hostVulnerability",
+      "directoryFields": ["assetIp", "severity", "vulnerabilityName"],
+      "contentLenses": ["snapshot", "discovery", "analysis", "decisions"],
+      "ui": { "icon": "alert-triangle" }
+    },
+    "edgeTemplates": [
+      {
+        "id": "vuln-in-group",
+        "source": {
+          "kind": "queryByField",
+          "objectType": "vulnerabilities-groups",
+          "sourcePath": "data.vulnerabilityName",
+          "targetPath": "data.name",
+          "limit": 5
+        },
+        "edges": [
+          {
+            "type": "inGroup",
+            "from": { "source": "concept" },
+            "to": { "source": "relatedConcept" },
+            "toObjectType": "vulnerabilities-groups",
+            "toKind": "pluginId",
+            "neighbor": "to"
+          }
+        ]
+      },
+      {
+        "id": "vuln-group-by-plugin",
+        "source": {
+          "kind": "queryByField",
+          "objectType": "vulnerabilities-groups",
+          "sourcePath": "data.pluginId",
+          "targetPath": "data.pluginId",
+          "limit": 5
+        },
+        "edges": [
+          {
+            "type": "inGroup",
+            "from": { "source": "concept" },
+            "to": { "source": "relatedConcept" },
+            "toObjectType": "vulnerabilities-groups",
+            "toKind": "pluginId",
+            "neighbor": "to"
+          }
+        ]
+      }
+    ]
   }
 }

package/catalox-seeds/inputs/graph-descriptors/asset-topology-vulnerabilities-graph.json

@@ -0,0 +1,75 @@
+{
+  "id": "asset-topology-vulnerabilities-graph",
+  "title": "Asset topology & vulnerabilities",
+  "focusObjectType": "assets",
+  "maxDepth": 2,
+  "includeEdgeTemplates": [
+    "asset-topology-associated",
+    "asset-vulnerabilities-by-ip",
+    "vuln-in-group",
+    "vuln-group-by-plugin"
+  ],
+  "tiers": [
+    {
+      "id": "topology",
+      "label": "Topology",
+      "objectTypes": ["assets", "subnets", "topology-zones"]
+    },
+    {
+      "id": "vulnerabilities",
+      "label": "Vulnerabilities",
+      "objectTypes": ["vulnerabilities", "vulnerabilities-groups"]
+    }
+  ],
+  "nodes": [
+    { "objectType": "assets", "tier": "topology" },
+    { "objectType": "subnets", "tier": "topology" },
+    { "objectType": "topology-zones", "tier": "topology" },
+    { "objectType": "vulnerabilities-groups", "tier": "vulnerabilities" },
+    { "objectType": "vulnerabilities", "tier": "vulnerabilities" }
+  ],
+  "directory": {
+    "defaultObjectTypes": [
+      "assets",
+      "subnets",
+      "topology-zones",
+      "vulnerabilities",
+      "vulnerabilities-groups"
+    ],
+    "searchFields": ["title", "identifierKey"],
+    "narrativeFiltersByObjectType": {
+      "assets": [
+        { "key": "has-vulnerabilities", "label": "Has vulnerabilities" },
+        { "key": "has-no-vulnerabilities", "label": "No vulnerabilities" },
+        { "key": "is-triaged", "label": "Is triaged" },
+        { "key": "has-lateral-movement-risk", "label": "Lateral movement risk" },
+        { "key": "has-critical-predicted-impact", "label": "Critical predicted impact" },
+        { "key": "has-high-or-critical-exploitability", "label": "High or critical exploitability" }
+      ],
+      "vulnerabilities": [
+        { "key": "has-critical-severity", "label": "Critical severity" },
+        { "key": "has-high-severity", "label": "High severity" },
+        { "key": "has-medium-severity", "label": "Medium severity" },
+        { "key": "has-breach-vector", "label": "Breach vector" }
+      ],
+      "vulnerabilities-groups": [
+        { "key": "has-critical-severity", "label": "Critical severity" },
+        { "key": "has-high-severity", "label": "High severity" },
+        { "key": "has-medium-severity", "label": "Medium severity" },
+        { "key": "has-low-severity", "label": "Low severity" }
+      ],
+      "subnets": [
+        { "key": "has-assets", "label": "Has assets" },
+        { "key": "has-possible-paths", "label": "Has possible paths" }
+      ],
+      "topology-zones": [
+        { "key": "has-analysis", "label": "Has analysis" }
+      ]
+    }
+  },
+  "ui": {
+    "icon": "network",
+    "group": "network",
+    "order": 10
+  }
+}

package/catalox-seeds/inputs/list-descriptors/assets-exploitability-decisions-list.json

@@ -10,6 +10,8 @@
   },
   "filters": [],
   "fields": [
+    "ipAddress",
+    "hostName",
     "decisionOverviewSummary",
     "decisionOverviewDetailedAnalysis",
     "decisionLabel",
@@ -20,6 +22,8 @@
   "extensions": [],
   "includeRelations": [],
   "allowedSorts": [
+    "ipAddress",
+    "hostName",
     "decisionRiskScore",
     "decisionUrgencyScore",
     "decisionStatus",

package/catalox-seeds/inputs/list-descriptors/assets-potential-impact-decisions-list.json

@@ -10,21 +10,29 @@
   },
   "filters": [],
   "fields": [
+    "ipAddress",
+    "hostName",
+    "potentialImpactLevel",
+    "potentialImpactConfidence",
+    "impactDecisionLabel",
+    "impactDecisionStatus",
+    "impactDecisionRiskScore",
+    "impactDecisionUrgencyScore",
     "decisionOverviewSummary",
-    "decisionOverviewDetailedAnalysis",
-    "decisionLabel",
-    "decisionStatus",
-    "decisionRiskScore"
+    "decisionOverviewDetailedAnalysis"
   ],
   "extensions": [],
   "includeRelations": [],
   "allowedSorts": [
-    "decisionRiskScore",
-    "decisionStatus",
-    "decisionLabel"
+    "ipAddress",
+    "hostName",
+    "impactDecisionRiskScore",
+    "impactDecisionStatus",
+    "impactDecisionLabel",
+    "potentialImpactLevel"
   ],
   "defaultSort": {
-    "property": "decisionRiskScore",
+    "property": "impactDecisionRiskScore",
     "direction": "desc"
   },
   "allowSortDrivenLeadingOverride": false

package/catalox-seeds/inputs/manifest.json

@@ -19,6 +19,9 @@
       "asset-detail-item",
       "topology-subnet-detail-item",
       "vulnerability-detail-item"
+    ],
+    "memorix-graph-descriptors": [
+      "asset-topology-vulnerabilities-graph"
     ]
   },
   "files": [
@@ -33,6 +36,7 @@
     "list-descriptors/topology-subnets-main-list.json",
     "list-descriptors/vulnerabilities-main-list.json",
     "list-descriptors/memorix-workspace-records-list.json",
+    "graph-descriptors/asset-topology-vulnerabilities-graph.json",
     "memorix-catalog-ids.json",
     "scope.json"
   ]

package/catalox-seeds/inputs/memorix-catalog-ids.json

@@ -3,6 +3,7 @@
   "catalogs": {
     "entityDescriptors": "memorix-object-type-descriptors",
     "listDescriptors": "lists",
-    "itemDescriptors": "memorix-item-descriptors"
+    "itemDescriptors": "memorix-item-descriptors",
+    "graphDescriptors": "memorix-graph-descriptors"
   }
 }