assemblyline-core 4.5.1.dev458__tar.gz → 4.5.1.dev461__tar.gz
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/PKG-INFO +1 -1
- assemblyline_core-4.5.1.dev461/assemblyline_core/VERSION +1 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/tasking_client.py +43 -42
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core.egg-info/PKG-INFO +1 -1
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core.egg-info/SOURCES.txt +1 -0
- assemblyline_core-4.5.1.dev461/test/test_tasking_client.py +53 -0
- assemblyline_core-4.5.1.dev458/assemblyline_core/VERSION +0 -1
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/LICENCE.md +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/README.md +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/__init__.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/alerter/__init__.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/alerter/processing.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/alerter/run_alerter.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/archiver/__init__.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/archiver/run_archiver.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/badlist_client.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/dispatching/__init__.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/dispatching/__main__.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/dispatching/client.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/dispatching/dispatcher.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/dispatching/schedules.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/dispatching/timeout.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/expiry/__init__.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/expiry/run_expiry.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/ingester/__init__.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/ingester/__main__.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/ingester/constants.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/ingester/ingester.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/metrics/__init__.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/metrics/es_metrics.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/metrics/heartbeat_formatter.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/metrics/helper.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/metrics/metrics_server.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/metrics/run_heartbeat_manager.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/metrics/run_metrics_aggregator.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/metrics/run_statistics_aggregator.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/plumber/__init__.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/plumber/run_plumber.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/replay/__init__.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/replay/client.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/replay/creator/__init__.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/replay/creator/run.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/replay/creator/run_worker.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/replay/loader/__init__.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/replay/loader/run.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/replay/loader/run_worker.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/replay/replay.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/safelist_client.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/scaler/__init__.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/scaler/collection.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/scaler/controllers/__init__.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/scaler/controllers/docker_ctl.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/scaler/controllers/interface.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/scaler/controllers/kubernetes_ctl.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/scaler/run_scaler.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/scaler/scaler_server.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/server_base.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/signature_client.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/submission_client.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/updater/__init__.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/updater/helper.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/updater/run_updater.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/vacuum/__init__.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/vacuum/crawler.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/vacuum/department_map.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/vacuum/safelist.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/vacuum/stream_map.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/vacuum/worker.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/workflow/__init__.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/workflow/run_workflow.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core.egg-info/dependency_links.txt +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core.egg-info/requires.txt +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core.egg-info/top_level.txt +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/setup.cfg +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/setup.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/test/test_alerter.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/test/test_badlist_client.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/test/test_dispatcher.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/test/test_expiry.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/test/test_plumber.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/test/test_replay.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/test/test_safelist_client.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/test/test_scaler.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/test/test_scheduler.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/test/test_signature_client.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/test/test_simulation.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/test/test_vacuum.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/test/test_worker_ingest.py +0 -0
- {assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/test/test_worker_submit.py +0 -0
@@ -0,0 +1 @@
|
|
1
|
+
4.5.1.dev461
|
@@ -126,7 +126,7 @@ class TaskingClient:
|
|
126
126
|
|
127
127
|
try:
|
128
128
|
# Get heuristics list
|
129
|
-
heuristics = service_data.pop('heuristics',
|
129
|
+
heuristics = service_data.pop('heuristics', [])
|
130
130
|
|
131
131
|
# Patch update_channel, registry_type before Service registration object creation
|
132
132
|
service_data['update_channel'] = service_data.get(
|
@@ -162,57 +162,58 @@ class TaskingClient:
|
|
162
162
|
self.log.info(f"{log_prefix}{service.name} version ({service.version}) registered")
|
163
163
|
|
164
164
|
new_heuristics = []
|
165
|
-
|
166
|
-
|
167
|
-
|
168
|
-
|
169
|
-
|
170
|
-
|
171
|
-
|
172
|
-
|
173
|
-
|
174
|
-
|
175
|
-
|
176
|
-
|
177
|
-
|
178
|
-
|
179
|
-
|
180
|
-
|
181
|
-
|
182
|
-
|
183
|
-
|
184
|
-
|
185
|
-
|
186
|
-
|
187
|
-
|
188
|
-
|
189
|
-
|
165
|
+
|
166
|
+
plan = self.datastore.heuristic.get_bulk_plan()
|
167
|
+
for index, heuristic in enumerate(heuristics):
|
168
|
+
heuristic_id = f'#{index}' # Set heuristic id to it's position in the list for logging purposes
|
169
|
+
try:
|
170
|
+
# Append service name to heuristic ID
|
171
|
+
heuristic['heur_id'] = f"{service.name.upper()}.{str(heuristic['heur_id'])}"
|
172
|
+
|
173
|
+
# Attack_id field is now a list, make it a list if we receive otherwise
|
174
|
+
attack_id = heuristic.get('attack_id', None)
|
175
|
+
if isinstance(attack_id, str):
|
176
|
+
heuristic['attack_id'] = [attack_id]
|
177
|
+
|
178
|
+
heuristic = Heuristic(heuristic)
|
179
|
+
heuristic_id = heuristic.heur_id
|
180
|
+
existing_heuristic_obj = self.datastore.heuristic.get_if_exists(heuristic_id)
|
181
|
+
if existing_heuristic_obj:
|
182
|
+
# Ensure statistics of heuristic are preserved
|
183
|
+
heuristic.stats = existing_heuristic_obj.stats
|
184
|
+
plan.add_upsert_operation(heuristic_id, heuristic)
|
185
|
+
except Exception as e:
|
186
|
+
msg = f"{service.name} has an invalid heuristic ({heuristic_id}): {str(e)}"
|
187
|
+
self.log.exception(f"{log_prefix}{msg}")
|
188
|
+
raise ValueError(msg)
|
189
|
+
|
190
|
+
if plan.operations:
|
190
191
|
for item in self.datastore.heuristic.bulk(plan)['items']:
|
191
192
|
if item['update']['result'] != "noop":
|
192
193
|
new_heuristics.append(item['update']['_id'])
|
193
194
|
self.log.info(f"{log_prefix}{service.name} "
|
194
|
-
|
195
|
+
f"heuristic {item['update']['_id']}: {item['update']['result'].upper()}")
|
195
196
|
|
196
|
-
|
197
|
-
|
198
|
-
|
199
|
-
|
197
|
+
# Look for heuristics that are no longer managed by the service and clean them up
|
198
|
+
all_heuristics = set(h_id for h_id in self.heuristics.keys()
|
199
|
+
if h_id.startswith(f"{service.name.upper()}."))
|
200
|
+
removed_heuristics = all_heuristics - set(h['heur_id'] for h in heuristics)
|
200
201
|
|
201
|
-
|
202
|
-
|
203
|
-
|
204
|
-
|
205
|
-
|
202
|
+
for heuristic in removed_heuristics:
|
203
|
+
# Only remove heuristics that aren't actively referenced in a result
|
204
|
+
if not self.datastore.result.search(f"result.sections.heuristic.heur_id:{heuristic}",
|
205
|
+
rows=0, track_total_hits=True)['total']:
|
206
|
+
self.datastore.heuristic.delete(heuristic)
|
206
207
|
|
207
208
|
|
208
209
|
|
209
|
-
|
210
|
+
self.datastore.heuristic.commit()
|
210
211
|
|
211
|
-
|
212
|
-
|
213
|
-
|
214
|
-
|
215
|
-
|
212
|
+
# Notify components watching for heuristic config changes
|
213
|
+
self.event_sender.send('heuristics', {
|
214
|
+
'operation': Operation.Modified,
|
215
|
+
'service_name': service.name
|
216
|
+
})
|
216
217
|
|
217
218
|
service_config = self.datastore.get_service_with_delta(service.name, as_obj=False)
|
218
219
|
|
@@ -0,0 +1,53 @@
|
|
1
|
+
|
2
|
+
import pytest
|
3
|
+
from assemblyline_core.tasking_client import TaskingClient
|
4
|
+
|
5
|
+
from assemblyline.odm.models.service import Service
|
6
|
+
from assemblyline.odm.models.heuristic import Heuristic
|
7
|
+
from assemblyline.odm.models.result import Result, Section, Heuristic as SectionHeuristic
|
8
|
+
from assemblyline.odm.random_data import (
|
9
|
+
create_badlists,
|
10
|
+
create_users,
|
11
|
+
wipe_badlist,
|
12
|
+
wipe_users,
|
13
|
+
)
|
14
|
+
from assemblyline.odm.randomizer import random_minimal_obj
|
15
|
+
|
16
|
+
|
17
|
+
@pytest.fixture(scope="module")
|
18
|
+
def client(datastore_connection):
|
19
|
+
try:
|
20
|
+
create_users(datastore_connection)
|
21
|
+
create_badlists(datastore_connection)
|
22
|
+
yield TaskingClient(datastore_connection)
|
23
|
+
finally:
|
24
|
+
wipe_users(datastore_connection)
|
25
|
+
wipe_badlist(datastore_connection)
|
26
|
+
|
27
|
+
def test_register_service(client, datastore_connection):
|
28
|
+
# Test service registration
|
29
|
+
service = random_minimal_obj(Service).as_primitives()
|
30
|
+
heuristics = [random_minimal_obj(Heuristic).as_primitives() for _ in range(2)]
|
31
|
+
service['heuristics'] = heuristics
|
32
|
+
assert client.register_service(service)
|
33
|
+
assert all([datastore_connection.heuristic.exists(h['heur_id']) for h in heuristics])
|
34
|
+
|
35
|
+
# Test registration with heuristics that were removed but still have related results
|
36
|
+
heuristic = heuristics.pop(0)
|
37
|
+
result = random_minimal_obj(Result)
|
38
|
+
section = random_minimal_obj(Section)
|
39
|
+
section.heuristic = SectionHeuristic(heuristic)
|
40
|
+
result.result.sections = [section]
|
41
|
+
datastore_connection.result.save('test_result', result)
|
42
|
+
datastore_connection.result.commit()
|
43
|
+
|
44
|
+
# Heuristics that were removed should still reside in the system if there are still associated data to it
|
45
|
+
service['heuristics'] = heuristics
|
46
|
+
assert client.register_service(service)
|
47
|
+
assert datastore_connection.heuristic.exists(heuristic['heur_id'])
|
48
|
+
|
49
|
+
# Test registration with removed heuristics that have no related results
|
50
|
+
datastore_connection.result.delete('test_result')
|
51
|
+
datastore_connection.result.commit()
|
52
|
+
assert client.register_service(service)
|
53
|
+
assert not datastore_connection.heuristic.exists(heuristic['heur_id'])
|
@@ -1 +0,0 @@
|
|
1
|
-
4.5.1.dev458
|
File without changes
|
File without changes
|
{assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/__init__.py
RENAMED
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
{assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/replay/client.py
RENAMED
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
{assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/replay/replay.py
RENAMED
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
{assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/server_base.py
RENAMED
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
{assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/assemblyline_core/vacuum/worker.py
RENAMED
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
{assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/test/test_badlist_client.py
RENAMED
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
{assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/test/test_safelist_client.py
RENAMED
File without changes
|
File without changes
|
File without changes
|
{assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/test/test_signature_client.py
RENAMED
File without changes
|
File without changes
|
File without changes
|
{assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/test/test_worker_ingest.py
RENAMED
File without changes
|
{assemblyline_core-4.5.1.dev458 → assemblyline_core-4.5.1.dev461}/test/test_worker_submit.py
RENAMED
File without changes
|