@zivego/n8n-nodes-dfir-iris 3.0.0

package/dist/nodes/DfirIris/v1/actions/alert/commonDescription.js

@@ -0,0 +1,537 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.alertIocProps = exports.alertIocs = exports.alertAssetProps = exports.alertAssets = exports.rAlertTitle = exports.alertTitle = exports.alertTags = exports.alertSourceProps = exports.alertOwner = exports.alertSource = exports.alertNote = exports.alertStartDate = exports.alertEndDate = exports.alertDescription = exports.rAlertCustomer = exports.alertCustomer = exports.alertContextProps = exports.alertClassification = exports.rAlertIds = exports.alertIds = exports.alertResolutionStatus = exports.rAlertSeverity = exports.alertSeverity = exports.rAlertStatus = exports.alertStatus = exports.rAlertId = exports.alertId = void 0;
+const asset = __importStar(require("./../asset/commonDescription"));
+const ioc = __importStar(require("./../ioc/commonDescription"));
+exports.alertId = {
+    displayName: 'Alert ID',
+    name: 'alert_id',
+    type: 'string',
+    default: '',
+};
+exports.rAlertId = {
+    displayName: 'Alert ID',
+    name: 'alert_id',
+    type: 'string',
+    default: '',
+    required: true,
+};
+exports.alertStatus = {
+    displayName: 'Alert Status',
+    name: 'alert_status_id',
+    type: 'options',
+    options: [
+        {
+            name: 'Unspecified',
+            value: 1,
+        },
+        {
+            name: 'New',
+            value: 2,
+        },
+        {
+            name: 'Assigned',
+            value: 3,
+        },
+        {
+            name: 'In Progress',
+            value: 4,
+        },
+        {
+            name: 'Pending',
+            value: 5,
+        },
+        {
+            name: 'Closed',
+            value: 6,
+        },
+        {
+            name: 'Merged',
+            value: 7,
+        },
+        {
+            name: 'Escalated',
+            value: 8,
+        },
+    ],
+    default: 1,
+};
+exports.rAlertStatus = {
+    displayName: 'Alert Status',
+    name: 'alert_status_id',
+    type: 'options',
+    options: [
+        {
+            name: 'Unspecified',
+            value: 1,
+        },
+        {
+            name: 'New',
+            value: 2,
+        },
+        {
+            name: 'Assigned',
+            value: 3,
+        },
+        {
+            name: 'In Progress',
+            value: 4,
+        },
+        {
+            name: 'Pending',
+            value: 5,
+        },
+        {
+            name: 'Closed',
+            value: 6,
+        },
+        {
+            name: 'Merged',
+            value: 7,
+        },
+        {
+            name: 'Escalated',
+            value: 8,
+        },
+    ],
+    default: 1,
+    required: true,
+};
+exports.alertSeverity = {
+    displayName: 'Alert Severity',
+    name: 'alert_severity_id',
+    type: 'options',
+    options: [
+        {
+            name: 'Medium',
+            value: 1,
+        },
+        {
+            name: 'Unspecified',
+            value: 2,
+        },
+        {
+            name: 'Informational',
+            value: 3,
+        },
+        {
+            name: 'Low',
+            value: 4,
+        },
+        {
+            name: 'High',
+            value: 5,
+        },
+        {
+            name: 'Critical',
+            value: 6,
+        },
+    ],
+    default: 2,
+};
+exports.rAlertSeverity = {
+    displayName: 'Alert Severity',
+    name: 'alert_severity_id',
+    type: 'options',
+    options: [
+        {
+            name: 'Medium',
+            value: 1,
+        },
+        {
+            name: 'Unspecified',
+            value: 2,
+        },
+        {
+            name: 'Informational',
+            value: 3,
+        },
+        {
+            name: 'Low',
+            value: 4,
+        },
+        {
+            name: 'High',
+            value: 5,
+        },
+        {
+            name: 'Critical',
+            value: 6,
+        },
+    ],
+    default: 2,
+    required: true,
+};
+exports.alertResolutionStatus = {
+    displayName: 'Alert Resolution Status',
+    name: 'alert_resolution_status_id',
+    type: 'options',
+    options: [
+        {
+            name: 'False Positive',
+            value: 1,
+        },
+        {
+            name: 'True Positive With Impact',
+            value: 2,
+        },
+        {
+            name: 'True Positive Without Impact',
+            value: 3,
+        },
+        {
+            name: 'Not Applicable',
+            value: 4,
+        },
+        {
+            name: 'Unknown',
+            value: 5,
+        },
+    ],
+    default: 5,
+};
+exports.alertIds = {
+    displayName: 'Alert IDs',
+    name: 'alert_ids',
+    type: 'string',
+    description: 'Comma-separated list of alert IDs',
+    placeholder: '1,2,3',
+    default: '',
+};
+exports.rAlertIds = {
+    displayName: 'Alert IDs',
+    name: 'alert_ids',
+    type: 'string',
+    description: 'Comma-separated list of alert IDs',
+    placeholder: '1,2,3',
+    default: '',
+    required: true,
+};
+exports.alertClassification = {
+    displayName: 'Alert Classification Name or ID',
+    name: 'alert_classification_id',
+    type: 'options',
+    description: 'Choose from the list, or specify an ID using an <a href="https://docs.n8n.io/code/expressions/">expression</a>',
+    typeOptions: {
+        loadOptionsMethod: 'getCaseClassifications',
+    },
+    default: '',
+};
+exports.alertContextProps = [
+    {
+        displayName: 'Alert Context',
+        name: '__alertContextType',
+        type: 'options',
+        options: [
+            {
+                name: 'Using Fields Below',
+                value: 'keypair',
+            },
+            {
+                name: 'Using JSON',
+                value: 'json',
+            },
+        ],
+        default: 'keypair',
+    },
+    {
+        displayName: 'Alert Context JSON',
+        name: '__alertContextJSON',
+        type: 'json',
+        displayOptions: {
+            show: {
+                __alertContextType: ['json'],
+            },
+        },
+        default: '{}',
+    },
+    {
+        displayName: 'Alert Context Key Value',
+        name: '__alertContextKV',
+        type: 'fixedCollection',
+        displayOptions: {
+            show: {
+                __alertContextType: ['keypair'],
+            },
+        },
+        typeOptions: {
+            multipleValues: true,
+        },
+        placeholder: 'Add context field',
+        default: {
+            parameters: [],
+        },
+        options: [
+            {
+                name: 'parameters',
+                displayName: 'Parameter',
+                values: [
+                    {
+                        displayName: 'Name',
+                        name: 'name',
+                        type: 'string',
+                        default: '',
+                    },
+                    {
+                        displayName: 'Value',
+                        name: 'value',
+                        type: 'string',
+                        default: '',
+                    },
+                ],
+            },
+        ],
+    },
+];
+exports.alertCustomer = {
+    displayName: 'Alert Customer Name or ID',
+    name: 'alert_customer_id',
+    type: 'options',
+    description: 'Choose from the list, or specify an ID using an <a href="https://docs.n8n.io/code/expressions/">expression</a>',
+    typeOptions: {
+        loadOptionsMethod: 'getCustomers',
+    },
+    default: '',
+};
+exports.rAlertCustomer = {
+    displayName: 'Alert Customer Name or ID',
+    name: 'alert_customer_id',
+    type: 'options',
+    description: 'Choose from the list, or specify an ID using an <a href="https://docs.n8n.io/code/expressions/">expression</a>',
+    typeOptions: {
+        loadOptionsMethod: 'getCustomers',
+    },
+    default: '',
+    required: true,
+};
+exports.alertDescription = {
+    displayName: 'Alert Description',
+    name: 'alert_description',
+    type: 'string',
+    typeOptions: {
+        rows: 4,
+    },
+    default: '',
+};
+exports.alertEndDate = {
+    displayName: 'Alert End Date',
+    name: 'source_end_date',
+    type: 'dateTime',
+    default: '',
+    description: 'Time of the Event in UTC according to RFC. Works only together with start date.',
+    hint: 'e.g. 2023-03-26T03:00:30',
+};
+exports.alertStartDate = {
+    displayName: 'Alert Start Date',
+    name: 'source_start_date',
+    type: 'dateTime',
+    default: '',
+    description: 'Time of the Event in UTC according to RFC. Works only together with end date.',
+    hint: 'e.g. 2023-03-26T03:00:30',
+};
+exports.alertNote = {
+    displayName: 'Alert Note',
+    name: 'alert_note',
+    type: 'string',
+    default: '',
+    description: 'Note of the alrt',
+};
+exports.alertSource = {
+    displayName: 'Alert Source',
+    name: 'alert_source',
+    type: 'string',
+    default: '',
+    description: 'Source of the alert (where it comes from). You can use part of the string for filtering.',
+};
+exports.alertOwner = {
+    displayName: 'Alert Owner Name or ID',
+    name: 'alert_owner_id',
+    type: 'options',
+    typeOptions: {
+        loadOptionsMethod: 'getUsers',
+    },
+    options: [],
+    default: '',
+    description: 'Choose from the list, or specify an ID using an <a href="https://docs.n8n.io/code/expressions/">expression</a>',
+};
+exports.alertSourceProps = [
+    exports.alertSource,
+    {
+        displayName: 'Alert Source Content',
+        name: 'alert_source_content',
+        type: 'json',
+        default: '{}',
+        description: 'JSON of the source content (raw event)',
+    },
+    {
+        displayName: 'Alert Source Event Time',
+        name: 'alert_source_event_time',
+        type: 'dateTime',
+        default: `${new Date().toISOString().split('.')[0]}`,
+        description: 'Time of the Event in UTC according to RFC',
+        hint: 'e.g. 2023-03-26T03:00:30',
+    },
+    {
+        displayName: 'Alert Source Link',
+        name: 'alert_source_link',
+        type: 'string',
+        default: '',
+        description: 'Link to the source',
+    },
+    {
+        displayName: 'Alert Source Reference',
+        name: 'alert_source_ref',
+        type: 'string',
+        default: '',
+        description: 'Reference to the source. Usually it is a unique ID.',
+    },
+];
+exports.alertTags = {
+    displayName: 'Alert Tags',
+    name: 'alert_tags',
+    type: 'string',
+    default: '',
+    description: 'Comma-separated list of tag names',
+};
+exports.alertTitle = {
+    displayName: 'Alert Title',
+    name: 'alert_title',
+    type: 'string',
+    default: '',
+};
+exports.rAlertTitle = {
+    displayName: 'Alert Title',
+    name: 'alert_title',
+    type: 'string',
+    default: '',
+    required: true,
+};
+exports.alertAssets = {
+    displayName: 'Alert Assets',
+    name: 'alert_assets',
+    type: 'string',
+    default: '',
+    description: 'Comma-separated list of Asset Names',
+    placeholder: 'asset 1,username,pc-1',
+};
+exports.alertAssetProps = [
+    {
+        displayName: 'Add Assets',
+        name: '__assetsCollection',
+        type: 'fixedCollection',
+        placeholder: 'Add Asset',
+        default: {},
+        typeOptions: {
+            multipleValues: true,
+        },
+        options: [
+            {
+                name: 'assetData',
+                displayName: 'Asset',
+                values: [
+                    asset.assetName,
+                    asset.assetDescription,
+                    asset.assetType,
+                    asset.assetIP,
+                    asset.assetDomain,
+                    asset.assetTags,
+                    {
+                        displayName: 'Enrichment',
+                        name: 'asset_enrichment',
+                        type: 'json',
+                        default: '{}',
+                        description: 'JSON Object with additional data',
+                    },
+                ],
+            },
+        ],
+    },
+    {
+        displayName: 'Add Assets (JSON)',
+        name: '__assetsCollectionJSON',
+        type: 'json',
+        description: 'Add data as array of assets. Will override usual setting.',
+        default: '{}',
+    },
+];
+exports.alertIocs = {
+    displayName: 'Alert IOCs',
+    name: 'alert_iocs',
+    type: 'string',
+    default: '',
+    description: 'Comma-separated list of Alert IOC IDs',
+    placeholder: '1,2,3',
+};
+exports.alertIocProps = [
+    {
+        displayName: 'Add IOCs',
+        name: '__iocsCollection',
+        type: 'fixedCollection',
+        placeholder: 'Add IOC',
+        default: {},
+        typeOptions: {
+            multipleValues: true,
+        },
+        options: [
+            {
+                name: 'iocData',
+                displayName: 'IOC',
+                values: [
+                    ioc.iocValue,
+                    ioc.iocDescription,
+                    ioc.iocType,
+                    ioc.iocTLP,
+                    ioc.iocTags,
+                    {
+                        displayName: 'Enrichment',
+                        name: 'ioc_enrichment',
+                        type: 'json',
+                        default: '{}',
+                        description: 'JSON Object with additional data',
+                    },
+                ],
+            },
+        ],
+    },
+    {
+        displayName: 'Add IOCs (JSON)',
+        name: '__iocsCollectionJSON',
+        type: 'json',
+        description: 'Add data as array of IOCs. Will override usual setting.',
+        default: '{}',
+    },
+];
+//# sourceMappingURL=commonDescription.js.map

package/dist/nodes/DfirIris/v1/actions/alert/countAlerts.operation.js

@@ -0,0 +1,139 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.description = void 0;
+exports.execute = execute;
+const n8n_workflow_1 = require("n8n-workflow");
+const Alert_resource_1 = require("./Alert.resource");
+const transport_1 = require("../../transport");
+const helpers_1 = require("../../helpers");
+const local = __importStar(require("./commonDescription"));
+const fields = [
+    "alert_classification_id",
+    "alert_context",
+    "alert_creation_time",
+    "alert_customer_id",
+    "alert_description",
+    "alert_id",
+    "alert_note",
+    "alert_owner_id",
+    "alert_resolution_status_id",
+    "alert_severity_id",
+    "alert_source",
+    "alert_source_content",
+    "alert_source_event_time",
+    "alert_source_link",
+    "alert_source_ref",
+    "alert_status_id",
+    "alert_tags",
+    "alert_title",
+    "alert_uuid",
+    "assets",
+    "cases",
+    "classification",
+    "comments",
+    "customer",
+    "iocs",
+    "modification_history",
+    "owner",
+    "resolution_status",
+    "severity",
+    "status"
+];
+const properties = [
+    {
+        displayName: 'Additional Fields',
+        name: 'additionalFields',
+        type: 'collection',
+        placeholder: 'Add Field',
+        default: {},
+        options: [
+            local.alertAssets,
+            local.alertClassification,
+            local.alertCustomer,
+            { ...local.alertDescription, description: "You can use part of the string" },
+            local.alertEndDate,
+            local.alertIds,
+            local.alertIocs,
+            local.alertOwner,
+            local.alertSeverity,
+            { ...local.alertSource, description: "You can use part of the string" },
+            local.alertStartDate,
+            local.alertStatus,
+            { ...local.alertTags, description: "You can use part of the string" },
+            { ...local.alertTitle, description: "You can use part of the string" },
+        ],
+    },
+    {
+        displayName: 'Options',
+        name: 'options',
+        type: 'collection',
+        placeholder: 'Add Option',
+        default: {},
+        options: [...helpers_1.types.returnRaw, ...helpers_1.types.fieldProperties(fields)],
+    },
+];
+const displayOptions = {
+    show: {
+        resource: ['alert'],
+        operation: ['countAlerts'],
+    },
+};
+exports.description = (0, n8n_workflow_1.updateDisplayOptions)(displayOptions, properties);
+async function execute(i) {
+    const query = { cid: 1, sort: 'desc' };
+    const body = {};
+    const irisLogger = new helpers_1.utils.IrisLog(this.logger);
+    let response;
+    helpers_1.utils.addAdditionalFields.call(this, body, i);
+    irisLogger.info('updated body', { body });
+    Object.assign(query, body);
+    response = await transport_1.apiRequestAll.call(this, 'GET', `${Alert_resource_1.endpoint}/filter`, {}, query, 1, 1, 'alerts');
+    const options = this.getNodeParameter('options', i, {});
+    const isRaw = options.isRaw || false;
+    irisLogger.info('response', { response });
+    if (Object.prototype.hasOwnProperty.call(options, 'fields')
+        && response.data
+        && typeof response.data === 'object'
+        && 'alerts' in response.data) {
+        const data = response.data;
+        data.alerts = helpers_1.utils.fieldsRemover(data.alerts, options);
+    }
+    if (!isRaw)
+        response = [{ total: response.data.total || 0 }];
+    const executionData = this.helpers.constructExecutionMetaData(this.helpers.returnJsonArray(response), { itemData: { item: i } });
+    return executionData;
+}
+//# sourceMappingURL=countAlerts.operation.js.map