binalyze-air-sdk 1.0.1__py3-none-any.whl → 1.0.3__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (142) hide show
  1. binalyze_air/__init__.py +77 -77
  2. binalyze_air/apis/__init__.py +67 -27
  3. binalyze_air/apis/acquisitions.py +107 -0
  4. binalyze_air/apis/api_tokens.py +49 -0
  5. binalyze_air/apis/assets.py +161 -0
  6. binalyze_air/apis/audit_logs.py +26 -0
  7. binalyze_air/apis/{authentication.py → auth.py} +29 -27
  8. binalyze_air/apis/auto_asset_tags.py +79 -75
  9. binalyze_air/apis/backup.py +177 -0
  10. binalyze_air/apis/baseline.py +46 -0
  11. binalyze_air/apis/cases.py +225 -0
  12. binalyze_air/apis/cloud_forensics.py +116 -0
  13. binalyze_air/apis/event_subscription.py +96 -96
  14. binalyze_air/apis/evidence.py +249 -53
  15. binalyze_air/apis/interact.py +153 -36
  16. binalyze_air/apis/investigation_hub.py +234 -0
  17. binalyze_air/apis/license.py +104 -0
  18. binalyze_air/apis/logger.py +83 -0
  19. binalyze_air/apis/multipart_upload.py +201 -0
  20. binalyze_air/apis/notifications.py +115 -0
  21. binalyze_air/apis/organizations.py +267 -0
  22. binalyze_air/apis/params.py +44 -39
  23. binalyze_air/apis/policies.py +186 -0
  24. binalyze_air/apis/preset_filters.py +79 -0
  25. binalyze_air/apis/recent_activities.py +71 -0
  26. binalyze_air/apis/relay_server.py +104 -0
  27. binalyze_air/apis/settings.py +395 -27
  28. binalyze_air/apis/tasks.py +80 -0
  29. binalyze_air/apis/triage.py +197 -0
  30. binalyze_air/apis/user_management.py +183 -74
  31. binalyze_air/apis/webhook_executions.py +50 -0
  32. binalyze_air/apis/webhooks.py +322 -230
  33. binalyze_air/base.py +207 -133
  34. binalyze_air/client.py +217 -1337
  35. binalyze_air/commands/__init__.py +175 -145
  36. binalyze_air/commands/acquisitions.py +661 -387
  37. binalyze_air/commands/api_tokens.py +55 -0
  38. binalyze_air/commands/assets.py +324 -362
  39. binalyze_air/commands/{authentication.py → auth.py} +36 -36
  40. binalyze_air/commands/auto_asset_tags.py +230 -230
  41. binalyze_air/commands/backup.py +47 -0
  42. binalyze_air/commands/baseline.py +32 -396
  43. binalyze_air/commands/cases.py +609 -602
  44. binalyze_air/commands/cloud_forensics.py +88 -0
  45. binalyze_air/commands/event_subscription.py +101 -101
  46. binalyze_air/commands/evidences.py +918 -988
  47. binalyze_air/commands/interact.py +172 -58
  48. binalyze_air/commands/investigation_hub.py +315 -0
  49. binalyze_air/commands/license.py +183 -0
  50. binalyze_air/commands/logger.py +126 -0
  51. binalyze_air/commands/multipart_upload.py +363 -0
  52. binalyze_air/commands/notifications.py +45 -0
  53. binalyze_air/commands/organizations.py +200 -221
  54. binalyze_air/commands/policies.py +175 -203
  55. binalyze_air/commands/preset_filters.py +55 -0
  56. binalyze_air/commands/recent_activities.py +32 -0
  57. binalyze_air/commands/relay_server.py +144 -0
  58. binalyze_air/commands/settings.py +431 -29
  59. binalyze_air/commands/tasks.py +95 -56
  60. binalyze_air/commands/triage.py +224 -360
  61. binalyze_air/commands/user_management.py +351 -126
  62. binalyze_air/commands/webhook_executions.py +77 -0
  63. binalyze_air/config.py +244 -244
  64. binalyze_air/exceptions.py +49 -49
  65. binalyze_air/http_client.py +426 -305
  66. binalyze_air/models/__init__.py +287 -285
  67. binalyze_air/models/acquisitions.py +365 -250
  68. binalyze_air/models/api_tokens.py +73 -0
  69. binalyze_air/models/assets.py +438 -438
  70. binalyze_air/models/audit.py +247 -272
  71. binalyze_air/models/audit_logs.py +14 -0
  72. binalyze_air/models/{authentication.py → auth.py} +69 -69
  73. binalyze_air/models/auto_asset_tags.py +227 -116
  74. binalyze_air/models/backup.py +138 -0
  75. binalyze_air/models/baseline.py +231 -231
  76. binalyze_air/models/cases.py +275 -275
  77. binalyze_air/models/cloud_forensics.py +145 -0
  78. binalyze_air/models/event_subscription.py +170 -171
  79. binalyze_air/models/evidence.py +65 -65
  80. binalyze_air/models/evidences.py +367 -348
  81. binalyze_air/models/interact.py +266 -135
  82. binalyze_air/models/investigation_hub.py +265 -0
  83. binalyze_air/models/license.py +150 -0
  84. binalyze_air/models/logger.py +83 -0
  85. binalyze_air/models/multipart_upload.py +352 -0
  86. binalyze_air/models/notifications.py +138 -0
  87. binalyze_air/models/organizations.py +293 -293
  88. binalyze_air/models/params.py +153 -127
  89. binalyze_air/models/policies.py +260 -249
  90. binalyze_air/models/preset_filters.py +79 -0
  91. binalyze_air/models/recent_activities.py +70 -0
  92. binalyze_air/models/relay_server.py +121 -0
  93. binalyze_air/models/settings.py +538 -84
  94. binalyze_air/models/tasks.py +215 -149
  95. binalyze_air/models/triage.py +141 -142
  96. binalyze_air/models/user_management.py +200 -97
  97. binalyze_air/models/webhook_executions.py +33 -0
  98. binalyze_air/queries/__init__.py +121 -133
  99. binalyze_air/queries/acquisitions.py +155 -155
  100. binalyze_air/queries/api_tokens.py +46 -0
  101. binalyze_air/queries/assets.py +186 -105
  102. binalyze_air/queries/audit.py +400 -416
  103. binalyze_air/queries/{authentication.py → auth.py} +55 -55
  104. binalyze_air/queries/auto_asset_tags.py +59 -59
  105. binalyze_air/queries/backup.py +66 -0
  106. binalyze_air/queries/baseline.py +21 -185
  107. binalyze_air/queries/cases.py +292 -292
  108. binalyze_air/queries/cloud_forensics.py +137 -0
  109. binalyze_air/queries/event_subscription.py +54 -54
  110. binalyze_air/queries/evidence.py +139 -139
  111. binalyze_air/queries/evidences.py +279 -279
  112. binalyze_air/queries/interact.py +140 -28
  113. binalyze_air/queries/investigation_hub.py +329 -0
  114. binalyze_air/queries/license.py +85 -0
  115. binalyze_air/queries/logger.py +58 -0
  116. binalyze_air/queries/multipart_upload.py +180 -0
  117. binalyze_air/queries/notifications.py +71 -0
  118. binalyze_air/queries/organizations.py +222 -222
  119. binalyze_air/queries/params.py +154 -115
  120. binalyze_air/queries/policies.py +149 -149
  121. binalyze_air/queries/preset_filters.py +60 -0
  122. binalyze_air/queries/recent_activities.py +44 -0
  123. binalyze_air/queries/relay_server.py +42 -0
  124. binalyze_air/queries/settings.py +533 -20
  125. binalyze_air/queries/tasks.py +125 -81
  126. binalyze_air/queries/triage.py +230 -230
  127. binalyze_air/queries/user_management.py +193 -83
  128. binalyze_air/queries/webhook_executions.py +39 -0
  129. binalyze_air_sdk-1.0.3.dist-info/METADATA +752 -0
  130. binalyze_air_sdk-1.0.3.dist-info/RECORD +132 -0
  131. {binalyze_air_sdk-1.0.1.dist-info → binalyze_air_sdk-1.0.3.dist-info}/WHEEL +1 -1
  132. binalyze_air/apis/endpoints.py +0 -22
  133. binalyze_air/apis/evidences.py +0 -216
  134. binalyze_air/apis/users.py +0 -68
  135. binalyze_air/commands/users.py +0 -101
  136. binalyze_air/models/endpoints.py +0 -76
  137. binalyze_air/models/users.py +0 -82
  138. binalyze_air/queries/endpoints.py +0 -25
  139. binalyze_air/queries/users.py +0 -69
  140. binalyze_air_sdk-1.0.1.dist-info/METADATA +0 -635
  141. binalyze_air_sdk-1.0.1.dist-info/RECORD +0 -82
  142. {binalyze_air_sdk-1.0.1.dist-info → binalyze_air_sdk-1.0.3.dist-info}/top_level.txt +0 -0
binalyze_air/commands/__init__.py CHANGED
@@ -1,146 +1,176 @@
1
- """
2
- Command implementations for the Binalyze AIR SDK (CQRS pattern).
3
- """
4
-
5
- from .assets import (
6
- IsolateAssetsCommand,
7
- UnisolateAssetsCommand,
8
- RebootAssetsCommand,
9
- ShutdownAssetsCommand,
10
- AddTagsToAssetsCommand,
11
- RemoveTagsFromAssetsCommand,
12
- UninstallAssetsCommand,
13
- )
14
- from .cases import (
15
- CreateCaseCommand,
16
- UpdateCaseCommand,
17
- CloseCaseCommand,
18
- OpenCaseCommand,
19
- ArchiveCaseCommand,
20
- ChangeCaseOwnerCommand,
21
- RemoveEndpointsFromCaseCommand,
22
- RemoveTaskAssignmentFromCaseCommand,
23
- ImportTaskAssignmentsToCaseCommand,
24
- )
25
- from .tasks import (
26
- CancelTaskCommand,
27
- DeleteTaskCommand,
28
- )
29
- from .acquisitions import (
30
- AssignAcquisitionTaskCommand,
31
- AssignImageAcquisitionTaskCommand,
32
- CreateAcquisitionProfileCommand,
33
- )
34
- from .policies import (
35
- CreatePolicyCommand,
36
- UpdatePolicyCommand,
37
- DeletePolicyCommand,
38
- ActivatePolicyCommand,
39
- DeactivatePolicyCommand,
40
- AssignPolicyCommand,
41
- UnassignPolicyCommand,
42
- ExecutePolicyCommand,
43
- )
44
- from .organizations import (
45
- CreateOrganizationCommand,
46
- UpdateOrganizationCommand,
47
- AddUserToOrganizationCommand,
48
- UpdateOrganizationSettingsCommand,
49
- )
50
- from .triage import (
51
- CreateTriageRuleCommand,
52
- UpdateTriageRuleCommand,
53
- DeleteTriageRuleCommand,
54
- EnableTriageRuleCommand,
55
- DisableTriageRuleCommand,
56
- CreateTriageTagCommand,
57
- DeleteTriageTagCommand,
58
- CreateTriageProfileCommand,
59
- UpdateTriageProfileCommand,
60
- DeleteTriageProfileCommand,
61
- )
62
- from .baseline import (
63
- CreateBaselineCommand,
64
- UpdateBaselineCommand,
65
- DeleteBaselineCommand,
66
- CompareBaselineCommand,
67
- CreateBaselineProfileCommand,
68
- UpdateBaselineProfileCommand,
69
- DeleteBaselineProfileCommand,
70
- CreateBaselineScheduleCommand,
71
- DeleteBaselineScheduleCommand,
72
- RefreshBaselineCommand,
73
- )
74
-
75
- # TODO: Add imports when implementing other endpoints
76
-
77
- __all__ = [
78
- # Asset commands
79
- "IsolateAssetsCommand",
80
- "UnisolateAssetsCommand",
81
- "RebootAssetsCommand",
82
- "ShutdownAssetsCommand",
83
- "AddTagsToAssetsCommand",
84
- "RemoveTagsFromAssetsCommand",
85
- "UninstallAssetsCommand",
86
-
87
- # Case commands
88
- "CreateCaseCommand",
89
- "UpdateCaseCommand",
90
- "CloseCaseCommand",
91
- "OpenCaseCommand",
92
- "ArchiveCaseCommand",
93
- "ChangeCaseOwnerCommand",
94
- "RemoveEndpointsFromCaseCommand",
95
- "RemoveTaskAssignmentFromCaseCommand",
96
- "ImportTaskAssignmentsToCaseCommand",
97
-
98
- # Task commands
99
- "CancelTaskCommand",
100
- "DeleteTaskCommand",
101
-
102
- # Acquisition commands
103
- "AssignAcquisitionTaskCommand",
104
- "AssignImageAcquisitionTaskCommand",
105
- "CreateAcquisitionProfileCommand",
106
-
107
- # Policy commands
108
- "CreatePolicyCommand",
109
- "UpdatePolicyCommand",
110
- "DeletePolicyCommand",
111
- "ActivatePolicyCommand",
112
- "DeactivatePolicyCommand",
113
- "AssignPolicyCommand",
114
- "UnassignPolicyCommand",
115
- "ExecutePolicyCommand",
116
-
117
- # Organization commands
118
- "CreateOrganizationCommand",
119
- "UpdateOrganizationCommand",
120
- "AddUserToOrganizationCommand",
121
- "UpdateOrganizationSettingsCommand",
122
-
123
- # Triage commands
124
- "CreateTriageRuleCommand",
125
- "UpdateTriageRuleCommand",
126
- "DeleteTriageRuleCommand",
127
- "EnableTriageRuleCommand",
128
- "DisableTriageRuleCommand",
129
- "CreateTriageTagCommand",
130
- "DeleteTriageTagCommand",
131
- "CreateTriageProfileCommand",
132
- "UpdateTriageProfileCommand",
133
- "DeleteTriageProfileCommand",
134
-
135
- # Baseline commands
136
- "CreateBaselineCommand",
137
- "UpdateBaselineCommand",
138
- "DeleteBaselineCommand",
139
- "CompareBaselineCommand",
140
- "CreateBaselineProfileCommand",
141
- "UpdateBaselineProfileCommand",
142
- "DeleteBaselineProfileCommand",
143
- "CreateBaselineScheduleCommand",
144
- "DeleteBaselineScheduleCommand",
145
- "RefreshBaselineCommand",
1
+ """
2
+ Command implementations for the Binalyze AIR SDK (CQRS pattern).
3
+ """
4
+
5
+ from .assets import (
6
+ IsolateAssetsCommand,
7
+ UnisolateAssetsCommand,
8
+ RebootAssetsCommand,
9
+ ShutdownAssetsCommand,
10
+ AddTagsToAssetsCommand,
11
+ RemoveTagsFromAssetsCommand,
12
+ UninstallAssetsCommand,
13
+ DeleteAssetTagByIdCommand,
14
+ DeleteAssetTagsByOrganizationIdCommand,
15
+ )
16
+ from .cases import (
17
+ CreateCaseCommand,
18
+ UpdateCaseCommand,
19
+ CloseCaseCommand,
20
+ OpenCaseCommand,
21
+ ArchiveCaseCommand,
22
+ ChangeCaseOwnerCommand,
23
+ RemoveEndpointsFromCaseCommand,
24
+ RemoveTaskAssignmentFromCaseCommand,
25
+ ImportTaskAssignmentsToCaseCommand,
26
+ )
27
+ from .tasks import (
28
+ CancelTaskCommand,
29
+ CancelTaskAssignmentCommand,
30
+ DeleteTaskAssignmentCommand,
31
+ DeleteTaskCommand,
32
+ CancelTaskByFilterCommand,
33
+ GenerateOffNetworkZipPasswordCommand,
34
+ )
35
+ from .acquisitions import (
36
+ AssignAcquisitionTaskCommand,
37
+ AssignImageAcquisitionTaskCommand,
38
+ CreateAcquisitionProfileCommand,
39
+ UpdateAcquisitionProfileCommand,
40
+ DeleteAcquisitionProfileCommand,
41
+ CreateOffNetworkAcquisitionCommand,
42
+ UpdateScheduledEvidenceAcquisitionCommand,
43
+ UpdateScheduledImageAcquisitionCommand,
44
+ ValidateOsqueryCommand,
45
+ )
46
+ from .policies import (
47
+ CreatePolicyCommand,
48
+ UpdatePolicyCommand,
49
+ DeletePolicyCommand,
50
+ ActivatePolicyCommand,
51
+ DeactivatePolicyCommand,
52
+ AssignPolicyCommand,
53
+ UnassignPolicyCommand,
54
+ ExecutePolicyCommand,
55
+ )
56
+ from .organizations import (
57
+ CreateOrganizationCommand,
58
+ UpdateOrganizationCommand,
59
+ UpdateOrganizationSettingsCommand,
60
+ )
61
+ from .triage import (
62
+ CreateTriageRuleCommand,
63
+ UpdateTriageRuleCommand,
64
+ DeleteTriageRuleCommand,
65
+ EnableTriageRuleCommand,
66
+ CreateTriageTagCommand,
67
+ )
68
+ from .baseline import (
69
+ AcquireBaselineByFilterCommand,
70
+ CompareBaselineByEndpointCommand,
71
+ )
72
+ from .user_management import (
73
+ CreateUserCommand,
74
+ UpdateUserCommand,
75
+ DeleteUserCommand,
76
+ CreateAIUserCommand,
77
+ CreateAPIUserCommand,
78
+ ChangeCurrentUserPasswordCommand,
79
+ SetAPIUserPasswordCommand,
80
+ ResetPasswordCommand,
81
+ ResetTFACommand,
82
+ CreateRoleCommand,
83
+ UpdateRoleCommand,
84
+ DeleteRoleCommand,
85
+ CreateUserGroupCommand,
86
+ UpdateUserGroupCommand,
87
+ DeleteUserGroupCommand,
88
+ )
89
+
90
+ # TODO: Add imports when implementing other endpoints
91
+
92
+ __all__ = [
93
+ # Asset commands
94
+ "IsolateAssetsCommand",
95
+ "UnisolateAssetsCommand",
96
+ "RebootAssetsCommand",
97
+ "ShutdownAssetsCommand",
98
+ "AddTagsToAssetsCommand",
99
+ "RemoveTagsFromAssetsCommand",
100
+ "UninstallAssetsCommand",
101
+ "DeleteAssetTagByIdCommand",
102
+ "DeleteAssetTagsByOrganizationIdCommand",
103
+
104
+ # Case commands
105
+ "CreateCaseCommand",
106
+ "UpdateCaseCommand",
107
+ "CloseCaseCommand",
108
+ "OpenCaseCommand",
109
+ "ArchiveCaseCommand",
110
+ "ChangeCaseOwnerCommand",
111
+ "RemoveEndpointsFromCaseCommand",
112
+ "RemoveTaskAssignmentFromCaseCommand",
113
+ "ImportTaskAssignmentsToCaseCommand",
114
+
115
+ # Task commands
116
+ "CancelTaskCommand",
117
+ "CancelTaskAssignmentCommand",
118
+ "DeleteTaskAssignmentCommand",
119
+ "DeleteTaskCommand",
120
+ "CancelTaskByFilterCommand",
121
+ "GenerateOffNetworkZipPasswordCommand",
122
+
123
+ # Acquisition commands
124
+ "AssignAcquisitionTaskCommand",
125
+ "AssignImageAcquisitionTaskCommand",
126
+ "CreateAcquisitionProfileCommand",
127
+ "UpdateAcquisitionProfileCommand",
128
+ "DeleteAcquisitionProfileCommand",
129
+ "CreateOffNetworkAcquisitionCommand",
130
+ "UpdateScheduledEvidenceAcquisitionCommand",
131
+ "UpdateScheduledImageAcquisitionCommand",
132
+ "ValidateOsqueryCommand",
133
+
134
+ # Policy commands
135
+ "CreatePolicyCommand",
136
+ "UpdatePolicyCommand",
137
+ "DeletePolicyCommand",
138
+ "ActivatePolicyCommand",
139
+ "DeactivatePolicyCommand",
140
+ "AssignPolicyCommand",
141
+ "UnassignPolicyCommand",
142
+ "ExecutePolicyCommand",
143
+
144
+ # Organization commands
145
+ "CreateOrganizationCommand",
146
+ "UpdateOrganizationCommand",
147
+ "UpdateOrganizationSettingsCommand",
148
+
149
+ # Triage commands
150
+ "CreateTriageRuleCommand",
151
+ "UpdateTriageRuleCommand",
152
+ "DeleteTriageRuleCommand",
153
+ "EnableTriageRuleCommand",
154
+ "CreateTriageTagCommand",
155
+
156
+ # Baseline commands
157
+ "AcquireBaselineByFilterCommand",
158
+ "CompareBaselineByEndpointCommand",
159
+
160
+ # User Management commands
161
+ "CreateUserCommand",
162
+ "UpdateUserCommand",
163
+ "DeleteUserCommand",
164
+ "CreateAIUserCommand",
165
+ "CreateAPIUserCommand",
166
+ "ChangeCurrentUserPasswordCommand",
167
+ "SetAPIUserPasswordCommand",
168
+ "ResetPasswordCommand",
169
+ "ResetTFACommand",
170
+ "CreateRoleCommand",
171
+ "UpdateRoleCommand",
172
+ "DeleteRoleCommand",
173
+ "CreateUserGroupCommand",
174
+ "UpdateUserGroupCommand",
175
+ "DeleteUserGroupCommand",
146
176
  ]