@x12i/memorix-retrieval 1.36.0 → 1.38.0

package/catalox-seeds/inputs/entity-descriptors/assets.json

@@ -882,6 +882,14 @@
               "itemFieldExists": "zone",
               "itemArrayIncludes": { "field": "reachableFromZones", "value": "OUTSIDE" }
             }
+          },
+          {
+            "type": "observedInZone",
+            "from": { "source": "concept" },
+            "to": { "source": "itemField", "field": "zone", "kind": "zoneName" },
+            "toObjectType": "topology-zones",
+            "toKind": "zoneName",
+            "when": { "itemFieldExists": "zone", "itemFieldMissing": "cidr" }
           }
         ]
       },
@@ -904,6 +912,26 @@
             "neighbor": "from"
           }
         ]
+      },
+      {
+        "id": "asset-subnets-by-cidr",
+        "source": {
+          "kind": "queryByField",
+          "objectType": "subnets",
+          "sourcePath": "data.subnetCidrs",
+          "targetPath": "data.cidr",
+          "limit": 20
+        },
+        "edges": [
+          {
+            "type": "containedIn",
+            "from": { "source": "concept" },
+            "to": { "source": "relatedConcept" },
+            "toObjectType": "subnets",
+            "toKind": "cidr",
+            "neighbor": "to"
+          }
+        ]
       }
     ]
   }

package/catalox-seeds/inputs/entity-descriptors/subnets.json

@@ -535,6 +535,7 @@
         "inputKind": "cidr",
         "outputKind": "cidr-path-facts",
         "writeToInsights": false,
+        "writeToRootProperty": "possiblePaths",
         "sources": {
           "topologyDb": "memorix-knowledge",
           "topologyCollection": "topology-raw"
@@ -558,7 +559,65 @@
       ]
     }
   },
-  "relations": {},
+  "relations": {
+    "subnetAssets": {
+      "targetEntity": "assets",
+      "type": "oneToMany",
+      "source": {
+        "contentType": "snapshots",
+        "path": "data.cidr"
+      },
+      "target": {
+        "contentType": "snapshots",
+        "path": "data.subnetCidrs"
+      },
+      "defaultMode": "array",
+      "defaultArrayProperty": "associatedAssetsSnapshots",
+      "targetFields": [
+        "ipAddress",
+        "hostName",
+        "hostType",
+        "zones"
+      ]
+    },
+    "subnetZone": {
+      "targetEntity": "topology-zones",
+      "type": "manyToOne",
+      "source": {
+        "contentType": "snapshots",
+        "path": "data.zone"
+      },
+      "target": {
+        "contentType": "snapshots",
+        "path": "data.name"
+      },
+      "defaultMode": "array",
+      "defaultArrayProperty": "associatedTopologyZonesSnapshots",
+      "targetFields": [
+        "name",
+        "zoneClass"
+      ]
+    }
+  },
+  "narratives": {
+    "has-assets": {
+      "label": "Has assets",
+      "displayName": "Has assets",
+      "description": "Subnet has one or more associated asset snapshots (associatedAssetsSnapshots).",
+      "kind": "having-signal",
+      "visibility": "user",
+      "sourceRef": "associatedAssetsSnapshots",
+      "targetEntity": "assets"
+    },
+    "has-possible-paths": {
+      "label": "Has possible paths",
+      "displayName": "Has possible paths",
+      "description": "Subnet snapshot has non-empty possiblePaths root property (topology path facts).",
+      "kind": "having-signal",
+      "visibility": "user",
+      "sourceRef": "possiblePaths"
+    }
+  },
   "graph": {
     "node": {
       "kind": "cidr",
@@ -567,6 +626,46 @@
       "ui": { "icon": "network" }
     },
     "edgeTemplates": [
+      {
+        "id": "subnet-zone-topology",
+        "source": {
+          "kind": "queryByField",
+          "objectType": "topology-zones",
+          "sourcePath": "data.zone",
+          "targetPath": "data.name",
+          "limit": 5
+        },
+        "edges": [
+          {
+            "type": "inZone",
+            "from": { "source": "concept" },
+            "to": { "source": "relatedConcept" },
+            "toObjectType": "topology-zones",
+            "toKind": "zoneName",
+            "neighbor": "to"
+          }
+        ]
+      },
+      {
+        "id": "subnet-assets-by-cidr",
+        "source": {
+          "kind": "queryByField",
+          "objectType": "assets",
+          "sourcePath": "data.cidr",
+          "targetPath": "data.subnetCidrs",
+          "limit": 50
+        },
+        "edges": [
+          {
+            "type": "containedIn",
+            "from": { "source": "relatedConcept" },
+            "to": { "source": "concept" },
+            "toObjectType": "assets",
+            "toKind": "ipAddress",
+            "neighbor": "from"
+          }
+        ]
+      },
       {
         "id": "subnet-path-facts",
         "source": { "kind": "pathFacts", "key": "possiblePaths" },

package/catalox-seeds/inputs/entity-descriptors/topology-zones.json

@@ -81,13 +81,56 @@
   },
   "associatedProperties": [],
   "processing": {},
-  "relations": {},
+  "relations": {
+    "zoneSubnets": {
+      "targetEntity": "subnets",
+      "type": "oneToMany",
+      "source": {
+        "contentType": "snapshots",
+        "path": "data.name"
+      },
+      "target": {
+        "contentType": "snapshots",
+        "path": "data.zone"
+      },
+      "defaultMode": "array",
+      "defaultArrayProperty": "associatedSubnetsSnapshots",
+      "targetFields": [
+        "cidr",
+        "networkAddress",
+        "zone",
+        "vr"
+      ]
+    }
+  },
   "graph": {
     "node": {
       "kind": "zoneName",
       "directoryFields": ["name"],
       "contentLenses": ["snapshot", "analysis"],
       "ui": { "icon": "shield" }
-    }
+    },
+    "edgeTemplates": [
+      {
+        "id": "zone-subnets-by-name",
+        "source": {
+          "kind": "queryByField",
+          "objectType": "subnets",
+          "sourcePath": "data.name",
+          "targetPath": "data.zone",
+          "limit": 50
+        },
+        "edges": [
+          {
+            "type": "inZone",
+            "from": { "source": "relatedConcept" },
+            "to": { "source": "concept" },
+            "toObjectType": "subnets",
+            "toKind": "cidr",
+            "neighbor": "from"
+          }
+        ]
+      }
+    ]
   }
 }

package/catalox-seeds/inputs/entity-descriptors/vulnerabilities-groups.json

@@ -400,6 +400,28 @@
       "directoryFields": ["name", "severity", "pluginId", "cveId"],
       "contentLenses": ["snapshot", "analysis"],
       "ui": { "icon": "bug" }
-    }
+    },
+    "edgeTemplates": [
+      {
+        "id": "group-vulnerabilities-by-plugin",
+        "source": {
+          "kind": "queryByField",
+          "objectType": "vulnerabilities",
+          "sourcePath": "data.pluginId",
+          "targetPath": "data.pluginId",
+          "limit": 50
+        },
+        "edges": [
+          {
+            "type": "inGroup",
+            "from": { "source": "relatedConcept" },
+            "to": { "source": "concept" },
+            "toObjectType": "vulnerabilities",
+            "toKind": "hostVulnerability",
+            "neighbor": "from"
+          }
+        ]
+      }
+    ]
   }
 }

package/catalox-seeds/inputs/entity-descriptors/vulnerabilities.json

@@ -655,11 +655,11 @@
         "direction": "parentToChild",
         "source": {
           "contentType": "snapshots",
-          "path": "data.assetIp"
+          "path": "data.assetIps"
         },
         "target": {
           "contentType": "snapshots",
-          "path": "data.assetIps"
+          "path": "data.assetIp"
         }
       }
     ],
@@ -867,6 +867,26 @@
       "ui": { "icon": "alert-triangle" }
     },
     "edgeTemplates": [
+      {
+        "id": "vuln-affected-asset",
+        "source": {
+          "kind": "queryByField",
+          "objectType": "assets",
+          "sourcePath": "data.assetIp",
+          "targetPath": "data.assetIps",
+          "limit": 5
+        },
+        "edges": [
+          {
+            "type": "affectsAsset",
+            "from": { "source": "concept" },
+            "to": { "source": "relatedConcept" },
+            "toObjectType": "assets",
+            "toKind": "ipAddress",
+            "neighbor": "to"
+          }
+        ]
+      },
       {
         "id": "vuln-in-group",
         "source": {

package/catalox-seeds/inputs/graph-descriptors/asset-subnet-paths-graph.json

@@ -0,0 +1,41 @@
+{
+  "id": "asset-subnet-paths-graph",
+  "title": "Asset → subnet → paths",
+  "focusObjectType": "assets",
+  "maxDepth": 3,
+  "includeEdgeTemplates": [
+    "asset-subnets-by-cidr",
+    "asset-topology-associated",
+    "subnet-zone-topology",
+    "subnet-assets-by-cidr",
+    "subnet-path-facts",
+    "zone-subnets-by-name"
+  ],
+  "tiers": [
+    {
+      "id": "topology",
+      "label": "Topology",
+      "objectTypes": ["assets", "subnets", "topology-zones"]
+    }
+  ],
+  "nodes": [
+    { "objectType": "assets", "tier": "topology" },
+    { "objectType": "subnets", "tier": "topology" },
+    { "objectType": "topology-zones", "tier": "topology" }
+  ],
+  "directory": {
+    "defaultObjectTypes": ["assets", "subnets", "topology-zones"],
+    "searchFields": ["title", "identifierKey"],
+    "narrativeFiltersByObjectType": {
+      "subnets": [
+        { "key": "has-assets", "label": "Has assets" },
+        { "key": "has-possible-paths", "label": "Has possible paths" }
+      ]
+    }
+  },
+  "ui": {
+    "icon": "network",
+    "group": "network",
+    "order": 30
+  }
+}

package/catalox-seeds/inputs/graph-descriptors/asset-topology-vulnerabilities-graph.json

@@ -2,12 +2,19 @@
   "id": "asset-topology-vulnerabilities-graph",
   "title": "Asset topology & vulnerabilities",
   "focusObjectType": "assets",
-  "maxDepth": 2,
+  "maxDepth": 3,
   "includeEdgeTemplates": [
     "asset-topology-associated",
+    "asset-subnets-by-cidr",
     "asset-vulnerabilities-by-ip",
+    "vuln-affected-asset",
     "vuln-in-group",
-    "vuln-group-by-plugin"
+    "vuln-group-by-plugin",
+    "group-vulnerabilities-by-plugin",
+    "subnet-zone-topology",
+    "subnet-assets-by-cidr",
+    "subnet-path-facts",
+    "zone-subnets-by-name"
   ],
   "tiers": [
     {

package/catalox-seeds/inputs/graph-descriptors/asset-vulnerability-group-graph.json

@@ -0,0 +1,38 @@
+{
+  "id": "asset-vulnerability-group-graph",
+  "title": "Asset → vulnerability → group",
+  "focusObjectType": "assets",
+  "maxDepth": 2,
+  "includeEdgeTemplates": [
+    "asset-vulnerabilities-by-ip",
+    "vuln-affected-asset",
+    "vuln-in-group",
+    "vuln-group-by-plugin"
+  ],
+  "tiers": [
+    {
+      "id": "topology",
+      "label": "Assets",
+      "objectTypes": ["assets"]
+    },
+    {
+      "id": "vulnerabilities",
+      "label": "Vulnerabilities",
+      "objectTypes": ["vulnerabilities", "vulnerabilities-groups"]
+    }
+  ],
+  "nodes": [
+    { "objectType": "assets", "tier": "topology" },
+    { "objectType": "vulnerabilities", "tier": "vulnerabilities" },
+    { "objectType": "vulnerabilities-groups", "tier": "vulnerabilities" }
+  ],
+  "directory": {
+    "defaultObjectTypes": ["assets", "vulnerabilities", "vulnerabilities-groups"],
+    "searchFields": ["title", "identifierKey"]
+  },
+  "ui": {
+    "icon": "bug",
+    "group": "network",
+    "order": 40
+  }
+}

package/catalox-seeds/inputs/graph-descriptors/vulnerability-asset-subnet-graph.json

@@ -0,0 +1,40 @@
+{
+  "id": "vulnerability-asset-subnet-graph",
+  "title": "Vulnerability → asset → subnet",
+  "focusObjectType": "vulnerabilities",
+  "maxDepth": 3,
+  "includeEdgeTemplates": [
+    "vuln-affected-asset",
+    "asset-subnets-by-cidr",
+    "asset-topology-associated",
+    "subnet-zone-topology",
+    "subnet-path-facts"
+  ],
+  "tiers": [
+    {
+      "id": "vulnerabilities",
+      "label": "Vulnerabilities",
+      "objectTypes": ["vulnerabilities"]
+    },
+    {
+      "id": "topology",
+      "label": "Topology",
+      "objectTypes": ["assets", "subnets", "topology-zones"]
+    }
+  ],
+  "nodes": [
+    { "objectType": "vulnerabilities", "tier": "vulnerabilities" },
+    { "objectType": "assets", "tier": "topology" },
+    { "objectType": "subnets", "tier": "topology" },
+    { "objectType": "topology-zones", "tier": "topology" }
+  ],
+  "directory": {
+    "defaultObjectTypes": ["vulnerabilities", "assets", "subnets"],
+    "searchFields": ["title", "identifierKey"]
+  },
+  "ui": {
+    "icon": "alert-triangle",
+    "group": "network",
+    "order": 20
+  }
+}