@x12i/memorix-retrieval 1.35.0 → 1.36.0

package/catalox-seeds/memorix-retrieval-descriptors.manifest.json

@@ -14,6 +14,16 @@
         "titleField": "entityName"
       }
     },
+    {
+      "catalogId": "memorix-graph-descriptors",
+      "name": "Memorix graph descriptors",
+      "catalogType": "memorix",
+      "sourceMode": "native",
+      "native": {
+        "itemIdField": "id",
+        "titleField": "title"
+      }
+    },
     {
       "catalogId": "lists",
       "name": "Memorix list descriptors",
@@ -93,6 +103,63 @@
         }
       }
     },
+    {
+      "catalogId": "memorix-graph-descriptors",
+      "descriptorVersion": "1",
+      "mode": "replace",
+      "descriptor": {
+        "catalogId": "memorix-graph-descriptors",
+        "label": "Memorix graph descriptors",
+        "sourceMode": "native",
+        "status": "active",
+        "capabilities": {
+          "canList": true,
+          "canGet": true,
+          "canCreate": true,
+          "canEdit": true,
+          "canDelete": true,
+          "canImport": true,
+          "canExport": true,
+          "canSync": false,
+          "canValidate": true,
+          "canViewReferences": true
+        },
+        "queryableFields": [
+          {
+            "key": "id",
+            "label": "Id",
+            "type": "string",
+            "indexed": true,
+            "filterable": true,
+            "listVisible": true,
+            "detailVisible": true
+          },
+          {
+            "key": "title",
+            "label": "Title",
+            "type": "string",
+            "indexed": true,
+            "filterable": true,
+            "listVisible": true,
+            "detailVisible": true
+          },
+          {
+            "key": "focusObjectType",
+            "label": "Focus object type",
+            "type": "string",
+            "indexed": true,
+            "filterable": true,
+            "listVisible": true,
+            "detailVisible": true
+          }
+        ],
+        "identity": {
+          "itemIdStrategy": "natural",
+          "itemIdField": "id",
+          "titleField": "title"
+        }
+      }
+    },
     {
       "catalogId": "lists",
       "descriptorVersion": "1",
@@ -217,6 +284,14 @@
         "canWrite": true
       }
     },
+    {
+      "appId": "memorix",
+      "catalogId": "memorix-graph-descriptors",
+      "access": {
+        "canRead": true,
+        "canWrite": true
+      }
+    },
     {
       "appId": "memorix",
       "catalogId": "lists",
@@ -329,6 +404,32 @@
             "item": true,
             "valueType": "array"
           },
+          "subnetCidr": {
+            "label": "Subnet CIDR",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.subnetCidrs.0"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "string"
+          },
+          "subnetIp": {
+            "label": "Subnet IP",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.subnets.0.networkAddress"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "string"
+          },
           "subnets": {
             "label": "Resolved Subnets",
             "source": {
@@ -727,6 +828,58 @@
             "list": true,
             "item": true,
             "valueType": "number"
+          },
+          "impactDecisionLabel": {
+            "label": "Impact Decision",
+            "source": {
+              "contentType": "decisions",
+              "path": "data.impactDecision.decision"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "string"
+          },
+          "impactDecisionStatus": {
+            "label": "Impact Decision Status",
+            "source": {
+              "contentType": "decisions",
+              "path": "data.impactDecision.status"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "string"
+          },
+          "impactDecisionRiskScore": {
+            "label": "Impact Decision Score",
+            "source": {
+              "contentType": "decisions",
+              "path": "data.impactDecision.riskScore"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "number"
+          },
+          "impactDecisionUrgencyScore": {
+            "label": "Impact Urgency Score",
+            "source": {
+              "contentType": "decisions",
+              "path": "data.impactDecision.urgencyScore"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "number"
           }
         },
         "associatedProperties": [
@@ -1058,6 +1211,136 @@
             "targetObjectType": "vulnerabilities"
           }
         },
+        "graph": {
+          "node": {
+            "kind": "ipAddress",
+            "directoryFields": [
+              "ipAddress",
+              "hostType",
+              "zones"
+            ],
+            "contentLenses": [
+              "snapshot",
+              "analysis",
+              "decisions"
+            ],
+            "ui": {
+              "icon": "server"
+            }
+          },
+          "edgeTemplates": [
+            {
+              "id": "asset-topology-associated",
+              "source": {
+                "kind": "associatedArray",
+                "key": "associatedTopology"
+              },
+              "edges": [
+                {
+                  "type": "containedIn",
+                  "from": {
+                    "source": "concept"
+                  },
+                  "to": {
+                    "source": "itemField",
+                    "field": "cidr",
+                    "kind": "cidr"
+                  },
+                  "toObjectType": "subnets",
+                  "toKind": "cidr",
+                  "when": {
+                    "itemFieldExists": "cidr"
+                  }
+                },
+                {
+                  "type": "inZone",
+                  "from": {
+                    "source": "itemField",
+                    "field": "cidr",
+                    "kind": "cidr"
+                  },
+                  "to": {
+                    "source": "itemField",
+                    "field": "zone",
+                    "kind": "zoneName"
+                  },
+                  "toObjectType": "topology-zones",
+                  "toKind": "zoneName",
+                  "when": {
+                    "itemFieldExists": "zone"
+                  }
+                },
+                {
+                  "type": "reachableFrom",
+                  "from": {
+                    "source": "itemArrayField",
+                    "field": "reachableFromZones",
+                    "kind": "zoneName"
+                  },
+                  "to": {
+                    "source": "itemField",
+                    "field": "zone",
+                    "kind": "zoneName"
+                  },
+                  "toObjectType": "topology-zones",
+                  "toKind": "zoneName",
+                  "when": {
+                    "itemFieldExists": "zone"
+                  }
+                },
+                {
+                  "type": "pathBridge",
+                  "from": {
+                    "source": "literal",
+                    "kind": "zoneName",
+                    "value": "OUTSIDE"
+                  },
+                  "to": {
+                    "source": "itemField",
+                    "field": "zone",
+                    "kind": "zoneName"
+                  },
+                  "toObjectType": "topology-zones",
+                  "toKind": "zoneName",
+                  "synthesizePath": {
+                    "titleTemplate": "{from} → {to}"
+                  },
+                  "when": {
+                    "itemFieldExists": "zone",
+                    "itemArrayIncludes": {
+                      "field": "reachableFromZones",
+                      "value": "OUTSIDE"
+                    }
+                  }
+                }
+              ]
+            },
+            {
+              "id": "asset-vulnerabilities-by-ip",
+              "source": {
+                "kind": "queryByField",
+                "objectType": "vulnerabilities",
+                "sourcePath": "data.assetIp",
+                "targetPath": "data.assetIp",
+                "limit": 50
+              },
+              "edges": [
+                {
+                  "type": "affectsAsset",
+                  "from": {
+                    "source": "relatedConcept"
+                  },
+                  "to": {
+                    "source": "concept"
+                  },
+                  "toObjectType": "vulnerabilities",
+                  "toKind": "hostVulnerability",
+                  "neighbor": "from"
+                }
+              ]
+            }
+          ]
+        },
         "schemaVersion": "memorix.objectTypeDescriptor.v2",
         "objectType": "assets"
       }
@@ -1657,10 +1940,163 @@
           }
         },
         "relations": {},
+        "graph": {
+          "node": {
+            "kind": "cidr",
+            "directoryFields": [
+              "cidr",
+              "zone"
+            ],
+            "contentLenses": [
+              "snapshot",
+              "analysis"
+            ],
+            "ui": {
+              "icon": "network"
+            }
+          },
+          "edgeTemplates": [
+            {
+              "id": "subnet-path-facts",
+              "source": {
+                "kind": "pathFacts",
+                "key": "possiblePaths"
+              },
+              "edges": []
+            }
+          ]
+        },
         "schemaVersion": "memorix.objectTypeDescriptor.v2",
         "objectType": "subnets"
       }
     },
+    {
+      "catalogId": "memorix-object-type-descriptors",
+      "scope": {
+        "domains": [
+          "network",
+          "vulnerabilities"
+        ],
+        "agents": [
+          "neo"
+        ]
+      },
+      "data": {
+        "id": "topology-zones",
+        "defaultListDescriptorId": "topology-zones-main-list",
+        "defaultItemDescriptorId": "topology-zone-detail-item",
+        "target": "entity",
+        "collectionPrefix": "topology-zones",
+        "identity": {
+          "allowedIdFields": [
+            "recordId"
+          ],
+          "requiredExactlyOne": true,
+          "defaultIdField": "recordId",
+          "conceptIdentifier": {
+            "kind": "zoneName",
+            "path": "concept.identifier.zoneName"
+          }
+        },
+        "defaults": {
+          "canonicalContentType": "snapshots",
+          "dataRoot": "data",
+          "effectiveDatePath": "capturedAt",
+          "fallbackEffectiveDatePaths": []
+        },
+        "contentTypes": {
+          "snapshots": {
+            "postfix": "snapshots",
+            "collection": "topology-zones-snapshots",
+            "isCanonical": true
+          },
+          "analysis": {
+            "postfix": "analysis",
+            "collection": "topology-zones-analysis",
+            "isCanonical": false
+          },
+          "core": {
+            "postfix": "core",
+            "collection": "topology-zones-core",
+            "isCanonical": false
+          }
+        },
+        "properties": {
+          "name": {
+            "label": "Zone Name",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.name"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "string"
+          },
+          "zoneClass": {
+            "label": "Zone Class",
+            "source": {
+              "contentType": "snapshots",
+              "path": "data.zoneClass"
+            },
+            "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
+            "list": true,
+            "item": true,
+            "valueType": "string"
+          },
+          "apparentRole": {
+            "label": "Apparent Role",
+            "source": {
+              "contentType": "analysis",
+              "path": "data.apparentRole"
+            },
+            "humanReadable": true,
+            "sortable": false,
+            "filterable": true,
+            "list": false,
+            "item": true,
+            "valueType": "string"
+          },
+          "shortAnalysis": {
+            "label": "Short Analysis",
+            "source": {
+              "contentType": "analysis",
+              "path": "data.shortAnalysis"
+            },
+            "humanReadable": true,
+            "sortable": false,
+            "filterable": false,
+            "list": false,
+            "item": true,
+            "valueType": "string"
+          }
+        },
+        "associatedProperties": [],
+        "processing": {},
+        "relations": {},
+        "graph": {
+          "node": {
+            "kind": "zoneName",
+            "directoryFields": [
+              "name"
+            ],
+            "contentLenses": [
+              "snapshot",
+              "analysis"
+            ],
+            "ui": {
+              "icon": "shield"
+            }
+          }
+        },
+        "schemaVersion": "memorix.objectTypeDescriptor.v2",
+        "objectType": "topology-zones"
+      }
+    },
     {
       "catalogId": "memorix-object-type-descriptors",
       "scope": {
@@ -2136,8 +2572,8 @@
               "contentType": "analysis",
               "path": "data.impact"
             },
-            "humanReadable": false,
-            "list": false,
+            "humanReadable": true,
+            "list": true,
             "item": true,
             "valueType": "object"
           },
@@ -2181,6 +2617,8 @@
               "path": "data.exploitability.exploitability"
             },
             "humanReadable": true,
+            "sortable": true,
+            "filterable": true,
             "list": true,
             "item": true,
             "valueType": "string"
@@ -2425,14 +2863,14 @@
             "displayName": "Vulnerability",
             "description": "Security-impacting scanner result (severity low/medium/high/critical).",
             "kind": "product-narrative",
-            "visibility": "user"
+            "visibility": "internal"
           },
           "is-finding": {
             "label": "Is finding",
             "displayName": "Informational finding",
             "description": "Informational scanner result (severity none/unknown).",
             "kind": "product-narrative",
-            "visibility": "user"
+            "visibility": "internal"
           },
           "has-analysis": {
             "label": "Has analysis",
@@ -2468,7 +2906,7 @@
             "label": "Has triage decision",
             "displayName": "Triaged",
             "kind": "rollup",
-            "visibility": "user"
+            "visibility": "internal"
           },
           "has-breach-vector": {
             "label": "Breach vector",
@@ -2563,6 +3001,75 @@
             "targetObjectType": "vulnerabilities-groups"
           }
         },
+        "graph": {
+          "node": {
+            "kind": "hostVulnerability",
+            "directoryFields": [
+              "assetIp",
+              "severity",
+              "vulnerabilityName"
+            ],
+            "contentLenses": [
+              "snapshot",
+              "discovery",
+              "analysis",
+              "decisions"
+            ],
+            "ui": {
+              "icon": "alert-triangle"
+            }
+          },
+          "edgeTemplates": [
+            {
+              "id": "vuln-in-group",
+              "source": {
+                "kind": "queryByField",
+                "objectType": "vulnerabilities-groups",
+                "sourcePath": "data.vulnerabilityName",
+                "targetPath": "data.name",
+                "limit": 5
+              },
+              "edges": [
+                {
+                  "type": "inGroup",
+                  "from": {
+                    "source": "concept"
+                  },
+                  "to": {
+                    "source": "relatedConcept"
+                  },
+                  "toObjectType": "vulnerabilities-groups",
+                  "toKind": "pluginId",
+                  "neighbor": "to"
+                }
+              ]
+            },
+            {
+              "id": "vuln-group-by-plugin",
+              "source": {
+                "kind": "queryByField",
+                "objectType": "vulnerabilities-groups",
+                "sourcePath": "data.pluginId",
+                "targetPath": "data.pluginId",
+                "limit": 5
+              },
+              "edges": [
+                {
+                  "type": "inGroup",
+                  "from": {
+                    "source": "concept"
+                  },
+                  "to": {
+                    "source": "relatedConcept"
+                  },
+                  "toObjectType": "vulnerabilities-groups",
+                  "toKind": "pluginId",
+                  "neighbor": "to"
+                }
+              ]
+            }
+          ]
+        },
         "schemaVersion": "memorix.objectTypeDescriptor.v2",
         "objectType": "vulnerabilities"
       }
@@ -2906,8 +3413,8 @@
               "contentType": "analysis",
               "path": "data.impact"
             },
-            "humanReadable": false,
-            "list": false,
+            "humanReadable": true,
+            "list": true,
             "item": true,
             "valueType": "object"
           },
@@ -3002,6 +3509,24 @@
             "targetObjectType": "vulnerabilities"
           }
         },
+        "graph": {
+          "node": {
+            "kind": "pluginId",
+            "directoryFields": [
+              "name",
+              "severity",
+              "pluginId",
+              "cveId"
+            ],
+            "contentLenses": [
+              "snapshot",
+              "analysis"
+            ],
+            "ui": {
+              "icon": "bug"
+            }
+          }
+        },
         "schemaVersion": "memorix.objectTypeDescriptor.v2",
         "objectType": "vulnerabilities-groups"
       }
@@ -3213,6 +3738,169 @@
         "objectType": "content-documents"
       }
     },
+    {
+      "catalogId": "memorix-graph-descriptors",
+      "scope": {
+        "domains": [
+          "network",
+          "vulnerabilities"
+        ],
+        "agents": [
+          "neo"
+        ]
+      },
+      "data": {
+        "id": "asset-topology-vulnerabilities-graph",
+        "title": "Asset topology & vulnerabilities",
+        "focusObjectType": "assets",
+        "maxDepth": 2,
+        "includeEdgeTemplates": [
+          "asset-topology-associated",
+          "asset-vulnerabilities-by-ip",
+          "vuln-in-group",
+          "vuln-group-by-plugin"
+        ],
+        "tiers": [
+          {
+            "id": "topology",
+            "label": "Topology",
+            "objectTypes": [
+              "assets",
+              "subnets",
+              "topology-zones"
+            ]
+          },
+          {
+            "id": "vulnerabilities",
+            "label": "Vulnerabilities",
+            "objectTypes": [
+              "vulnerabilities",
+              "vulnerabilities-groups"
+            ]
+          }
+        ],
+        "nodes": [
+          {
+            "objectType": "assets",
+            "tier": "topology"
+          },
+          {
+            "objectType": "subnets",
+            "tier": "topology"
+          },
+          {
+            "objectType": "topology-zones",
+            "tier": "topology"
+          },
+          {
+            "objectType": "vulnerabilities-groups",
+            "tier": "vulnerabilities"
+          },
+          {
+            "objectType": "vulnerabilities",
+            "tier": "vulnerabilities"
+          }
+        ],
+        "directory": {
+          "defaultObjectTypes": [
+            "assets",
+            "subnets",
+            "topology-zones",
+            "vulnerabilities",
+            "vulnerabilities-groups"
+          ],
+          "searchFields": [
+            "title",
+            "identifierKey"
+          ],
+          "narrativeFiltersByObjectType": {
+            "assets": [
+              {
+                "key": "has-vulnerabilities",
+                "label": "Has vulnerabilities"
+              },
+              {
+                "key": "has-no-vulnerabilities",
+                "label": "No vulnerabilities"
+              },
+              {
+                "key": "is-triaged",
+                "label": "Is triaged"
+              },
+              {
+                "key": "has-lateral-movement-risk",
+                "label": "Lateral movement risk"
+              },
+              {
+                "key": "has-critical-predicted-impact",
+                "label": "Critical predicted impact"
+              },
+              {
+                "key": "has-high-or-critical-exploitability",
+                "label": "High or critical exploitability"
+              }
+            ],
+            "vulnerabilities": [
+              {
+                "key": "has-critical-severity",
+                "label": "Critical severity"
+              },
+              {
+                "key": "has-high-severity",
+                "label": "High severity"
+              },
+              {
+                "key": "has-medium-severity",
+                "label": "Medium severity"
+              },
+              {
+                "key": "has-breach-vector",
+                "label": "Breach vector"
+              }
+            ],
+            "vulnerabilities-groups": [
+              {
+                "key": "has-critical-severity",
+                "label": "Critical severity"
+              },
+              {
+                "key": "has-high-severity",
+                "label": "High severity"
+              },
+              {
+                "key": "has-medium-severity",
+                "label": "Medium severity"
+              },
+              {
+                "key": "has-low-severity",
+                "label": "Low severity"
+              }
+            ],
+            "subnets": [
+              {
+                "key": "has-assets",
+                "label": "Has assets"
+              },
+              {
+                "key": "has-possible-paths",
+                "label": "Has possible paths"
+              }
+            ],
+            "topology-zones": [
+              {
+                "key": "has-analysis",
+                "label": "Has analysis"
+              }
+            ]
+          }
+        },
+        "ui": {
+          "icon": "network",
+          "group": "network",
+          "order": 10
+        }
+      }
+    },
     {
       "catalogId": "lists",
       "scope": {
@@ -3480,6 +4168,8 @@
         },
         "filters": [],
         "fields": [
+          "ipAddress",
+          "hostName",
           "decisionOverviewSummary",
           "decisionOverviewDetailedAnalysis",
           "decisionLabel",
@@ -3490,6 +4180,8 @@
         "extensions": [],
         "includeRelations": [],
         "allowedSorts": [
+          "ipAddress",
+          "hostName",
           "decisionRiskScore",
           "decisionUrgencyScore",
           "decisionStatus",
@@ -3525,21 +4217,29 @@
         },
         "filters": [],
         "fields": [
+          "ipAddress",
+          "hostName",
+          "potentialImpactLevel",
+          "potentialImpactConfidence",
+          "impactDecisionLabel",
+          "impactDecisionStatus",
+          "impactDecisionRiskScore",
+          "impactDecisionUrgencyScore",
           "decisionOverviewSummary",
-          "decisionOverviewDetailedAnalysis",
-          "decisionLabel",
-          "decisionStatus",
-          "decisionRiskScore"
+          "decisionOverviewDetailedAnalysis"
         ],
         "extensions": [],
         "includeRelations": [],
         "allowedSorts": [
-          "decisionRiskScore",
-          "decisionStatus",
-          "decisionLabel"
+          "ipAddress",
+          "hostName",
+          "impactDecisionRiskScore",
+          "impactDecisionStatus",
+          "impactDecisionLabel",
+          "potentialImpactLevel"
         ],
         "defaultSort": {
-          "property": "decisionRiskScore",
+          "property": "impactDecisionRiskScore",
           "direction": "desc"
         },
         "allowSortDrivenLeadingOverride": false