catocli 2.0.4__py3-none-any.whl → 2.1.0__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of catocli might be problematic. Click here for more details.
- catocli/Utils/clidriver.py +11 -4
- catocli/__init__.py +1 -1
- catocli/parsers/custom/export_sites/export_sites.py +20 -3
- catocli/parsers/custom/import_sites_to_tf/__init__.py +3 -1
- catocli/parsers/custom/import_sites_to_tf/import_sites_to_tf.py +71 -5
- catocli/parsers/mutation_accountManagement/__init__.py +13 -0
- catocli/parsers/mutation_accountManagement_disableAccount/README.md +16 -0
- catocli/parsers/mutation_container/__init__.py +116 -0
- catocli/parsers/mutation_container_fqdn/README.md +7 -0
- catocli/parsers/mutation_container_fqdn_addValues/README.md +17 -0
- catocli/parsers/mutation_container_fqdn_createFromFile/README.md +17 -0
- catocli/parsers/mutation_container_fqdn_removeValues/README.md +17 -0
- catocli/parsers/mutation_container_fqdn_updateFromFile/README.md +17 -0
- catocli/parsers/mutation_container_ipAddressRange/README.md +7 -0
- catocli/parsers/mutation_container_ipAddressRange_addValues/README.md +17 -0
- catocli/parsers/mutation_container_ipAddressRange_createFromFile/README.md +17 -0
- catocli/parsers/mutation_container_ipAddressRange_removeValues/README.md +17 -0
- catocli/parsers/mutation_container_ipAddressRange_updateFromFile/README.md +17 -0
- catocli/parsers/mutation_groups/README.md +7 -0
- catocli/parsers/mutation_groups/__init__.py +48 -0
- catocli/parsers/mutation_groups_createGroup/README.md +18 -0
- catocli/parsers/mutation_groups_deleteGroup/README.md +18 -0
- catocli/parsers/mutation_groups_updateGroup/README.md +18 -0
- catocli/parsers/mutation_policy_internetFirewall_addRule/README.md +1 -1
- catocli/parsers/mutation_policy_internetFirewall_updateRule/README.md +1 -1
- catocli/parsers/mutation_policy_wanFirewall_addRule/README.md +1 -1
- catocli/parsers/mutation_policy_wanFirewall_updateRule/README.md +1 -1
- catocli/parsers/mutation_site/__init__.py +104 -0
- catocli/parsers/mutation_site_assignSiteBwLicense/README.md +17 -0
- catocli/parsers/mutation_site_removeSecondaryAwsVSocket/README.md +17 -0
- catocli/parsers/mutation_site_removeSecondaryAzureVSocket/README.md +17 -0
- catocli/parsers/mutation_site_removeSiteBwLicense/README.md +17 -0
- catocli/parsers/mutation_site_replaceSiteBwLicense/README.md +17 -0
- catocli/parsers/mutation_site_updateSecondaryAwsVSocket/README.md +17 -0
- catocli/parsers/mutation_site_updateSecondaryAzureVSocket/README.md +17 -0
- catocli/parsers/mutation_site_updateSiteBwLicense/README.md +17 -0
- catocli/parsers/mutation_site_updateSiteGeneralDetails/README.md +1 -1
- catocli/parsers/mutation_sites/__init__.py +104 -0
- catocli/parsers/mutation_sites_assignSiteBwLicense/README.md +17 -0
- catocli/parsers/mutation_sites_removeSecondaryAwsVSocket/README.md +17 -0
- catocli/parsers/mutation_sites_removeSecondaryAzureVSocket/README.md +17 -0
- catocli/parsers/mutation_sites_removeSiteBwLicense/README.md +17 -0
- catocli/parsers/mutation_sites_replaceSiteBwLicense/README.md +17 -0
- catocli/parsers/mutation_sites_updateSecondaryAwsVSocket/README.md +17 -0
- catocli/parsers/mutation_sites_updateSecondaryAzureVSocket/README.md +17 -0
- catocli/parsers/mutation_sites_updateSiteBwLicense/README.md +17 -0
- catocli/parsers/mutation_sites_updateSiteGeneralDetails/README.md +1 -1
- catocli/parsers/parserApiClient.py +42 -19
- catocli/parsers/query_eventsFeed/README.md +1 -1
- catocli/parsers/query_groups/README.md +7 -0
- catocli/parsers/query_groups/__init__.py +54 -0
- catocli/parsers/query_groups_group/README.md +7 -0
- catocli/parsers/query_groups_groupList/README.md +18 -0
- catocli/parsers/query_groups_group_members/README.md +18 -0
- catocli/parsers/query_groups_whereUsed/README.md +17 -0
- catocli/parsers/query_policy/README.md +0 -17
- catocli/parsers/query_policy/__init__.py +153 -8
- catocli/parsers/query_policy_appTenantRestriction/README.md +7 -0
- catocli/parsers/query_policy_appTenantRestriction_policy/README.md +17 -0
- catocli/parsers/query_policy_dynamicIpAllocation/README.md +7 -0
- catocli/parsers/query_policy_dynamicIpAllocation_policy/README.md +17 -0
- catocli/parsers/query_policy_internetFirewall/README.md +7 -0
- catocli/parsers/query_policy_internetFirewall_policy/README.md +17 -0
- catocli/parsers/query_policy_remotePortFwd/README.md +7 -0
- catocli/parsers/query_policy_remotePortFwd_policy/README.md +17 -0
- catocli/parsers/query_policy_socketLan/README.md +7 -0
- catocli/parsers/query_policy_socketLan_policy/README.md +17 -0
- catocli/parsers/query_policy_terminalServer/README.md +7 -0
- catocli/parsers/query_policy_terminalServer_policy/README.md +17 -0
- catocli/parsers/query_policy_wanFirewall/README.md +7 -0
- catocli/parsers/query_policy_wanFirewall_policy/README.md +17 -0
- catocli/parsers/query_policy_wanNetwork/README.md +7 -0
- catocli/parsers/query_policy_wanNetwork_policy/README.md +17 -0
- catocli/parsers/query_popLocations/README.md +17 -0
- catocli/parsers/query_popLocations/__init__.py +16 -0
- catocli/parsers/query_site/README.md +0 -16
- catocli/parsers/query_site/__init__.py +118 -8
- catocli/parsers/query_site_availableVersionList/README.md +17 -0
- catocli/parsers/query_site_bgpPeer/README.md +17 -0
- catocli/parsers/query_site_bgpPeerList/README.md +17 -0
- catocli/parsers/query_site_cloudInterconnectConnectionConnectivity/README.md +17 -0
- catocli/parsers/query_site_cloudInterconnectPhysicalConnection/README.md +17 -0
- catocli/parsers/query_site_cloudInterconnectPhysicalConnectionId/README.md +17 -0
- catocli/parsers/query_site_secondaryAwsVSocket/README.md +17 -0
- catocli/parsers/query_site_secondaryAzureVSocket/README.md +17 -0
- catocli/parsers/query_site_siteBgpStatus/README.md +17 -0
- catocli/parsers/query_socketPortMetrics/README.md +23 -0
- catocli/parsers/query_socketPortMetrics/__init__.py +16 -0
- catocli/parsers/query_socketPortMetricsTimeSeries/README.md +24 -0
- catocli/parsers/query_socketPortMetricsTimeSeries/__init__.py +16 -0
- catocli/parsers/raw/README.md +0 -14
- catocli/parsers/raw/__init__.py +0 -2
- {catocli-2.0.4.dist-info → catocli-2.1.0.dist-info}/METADATA +3 -2
- {catocli-2.0.4.dist-info → catocli-2.1.0.dist-info}/RECORD +300 -178
- {catocli-2.0.4.dist-info → catocli-2.1.0.dist-info}/WHEEL +1 -1
- {catocli-2.0.4.dist-info → catocli-2.1.0.dist-info}/top_level.txt +0 -1
- graphql_client/api/call_api.py +4 -3
- models/mutation.accountManagement.addAccount.json +97 -0
- models/mutation.accountManagement.disableAccount.json +545 -0
- models/mutation.accountManagement.removeAccount.json +102 -3
- models/mutation.accountManagement.updateAccount.json +97 -0
- models/mutation.admin.addAdmin.json +6 -9
- models/mutation.container.delete.json +2 -2
- models/mutation.container.fqdn.addValues.json +866 -0
- models/mutation.container.fqdn.createFromFile.json +819 -0
- models/mutation.container.fqdn.removeValues.json +866 -0
- models/mutation.container.fqdn.updateFromFile.json +1045 -0
- models/mutation.container.ipAddressRange.addValues.json +1020 -0
- models/mutation.container.ipAddressRange.createFromFile.json +819 -0
- models/mutation.container.ipAddressRange.removeValues.json +1020 -0
- models/mutation.container.ipAddressRange.updateFromFile.json +1045 -0
- models/mutation.groups.createGroup.json +3178 -0
- models/mutation.groups.deleteGroup.json +2758 -0
- models/mutation.groups.updateGroup.json +4429 -0
- models/mutation.hardware.updateHardwareShipping.json +30 -10
- models/mutation.policy.appTenantRestriction.addRule.json +25 -25
- models/mutation.policy.appTenantRestriction.addSection.json +3 -3
- models/mutation.policy.appTenantRestriction.createPolicyRevision.json +31 -31
- models/mutation.policy.appTenantRestriction.discardPolicyRevision.json +31 -31
- models/mutation.policy.appTenantRestriction.moveRule.json +25 -25
- models/mutation.policy.appTenantRestriction.moveSection.json +3 -3
- models/mutation.policy.appTenantRestriction.publishPolicyRevision.json +31 -31
- models/mutation.policy.appTenantRestriction.removeRule.json +25 -25
- models/mutation.policy.appTenantRestriction.removeSection.json +3 -3
- models/mutation.policy.appTenantRestriction.updatePolicy.json +31 -31
- models/mutation.policy.appTenantRestriction.updateRule.json +25 -25
- models/mutation.policy.appTenantRestriction.updateSection.json +3 -3
- models/mutation.policy.dynamicIpAllocation.addRule.json +11 -11
- models/mutation.policy.dynamicIpAllocation.addSection.json +3 -3
- models/mutation.policy.dynamicIpAllocation.createPolicyRevision.json +17 -17
- models/mutation.policy.dynamicIpAllocation.discardPolicyRevision.json +17 -17
- models/mutation.policy.dynamicIpAllocation.moveRule.json +11 -11
- models/mutation.policy.dynamicIpAllocation.moveSection.json +3 -3
- models/mutation.policy.dynamicIpAllocation.publishPolicyRevision.json +17 -17
- models/mutation.policy.dynamicIpAllocation.removeRule.json +11 -11
- models/mutation.policy.dynamicIpAllocation.removeSection.json +3 -3
- models/mutation.policy.dynamicIpAllocation.updatePolicy.json +17 -17
- models/mutation.policy.dynamicIpAllocation.updateRule.json +11 -11
- models/mutation.policy.dynamicIpAllocation.updateSection.json +3 -3
- models/mutation.policy.internetFirewall.addRule.json +532 -85
- models/mutation.policy.internetFirewall.addSection.json +3 -3
- models/mutation.policy.internetFirewall.createPolicyRevision.json +208 -91
- models/mutation.policy.internetFirewall.discardPolicyRevision.json +208 -91
- models/mutation.policy.internetFirewall.moveRule.json +202 -85
- models/mutation.policy.internetFirewall.moveSection.json +3 -3
- models/mutation.policy.internetFirewall.publishPolicyRevision.json +208 -91
- models/mutation.policy.internetFirewall.removeRule.json +202 -85
- models/mutation.policy.internetFirewall.removeSection.json +3 -3
- models/mutation.policy.internetFirewall.updatePolicy.json +208 -91
- models/mutation.policy.internetFirewall.updateRule.json +523 -85
- models/mutation.policy.internetFirewall.updateSection.json +3 -3
- models/mutation.policy.remotePortFwd.addRule.json +16 -16
- models/mutation.policy.remotePortFwd.addSection.json +3 -3
- models/mutation.policy.remotePortFwd.createPolicyRevision.json +22 -22
- models/mutation.policy.remotePortFwd.discardPolicyRevision.json +22 -22
- models/mutation.policy.remotePortFwd.moveRule.json +16 -16
- models/mutation.policy.remotePortFwd.moveSection.json +3 -3
- models/mutation.policy.remotePortFwd.publishPolicyRevision.json +22 -22
- models/mutation.policy.remotePortFwd.removeRule.json +16 -16
- models/mutation.policy.remotePortFwd.removeSection.json +3 -3
- models/mutation.policy.remotePortFwd.updatePolicy.json +22 -22
- models/mutation.policy.remotePortFwd.updateRule.json +16 -16
- models/mutation.policy.remotePortFwd.updateSection.json +3 -3
- models/mutation.policy.socketLan.addRule.json +81 -81
- models/mutation.policy.socketLan.addSection.json +3 -3
- models/mutation.policy.socketLan.createPolicyRevision.json +87 -87
- models/mutation.policy.socketLan.discardPolicyRevision.json +87 -87
- models/mutation.policy.socketLan.moveRule.json +81 -81
- models/mutation.policy.socketLan.moveSection.json +3 -3
- models/mutation.policy.socketLan.publishPolicyRevision.json +87 -87
- models/mutation.policy.socketLan.removeRule.json +81 -81
- models/mutation.policy.socketLan.removeSection.json +3 -3
- models/mutation.policy.socketLan.updatePolicy.json +87 -87
- models/mutation.policy.socketLan.updateRule.json +81 -81
- models/mutation.policy.socketLan.updateSection.json +3 -3
- models/mutation.policy.terminalServer.addRule.json +6 -6
- models/mutation.policy.terminalServer.addSection.json +3 -3
- models/mutation.policy.terminalServer.createPolicyRevision.json +12 -12
- models/mutation.policy.terminalServer.discardPolicyRevision.json +12 -12
- models/mutation.policy.terminalServer.moveRule.json +6 -6
- models/mutation.policy.terminalServer.moveSection.json +3 -3
- models/mutation.policy.terminalServer.publishPolicyRevision.json +12 -12
- models/mutation.policy.terminalServer.removeRule.json +6 -6
- models/mutation.policy.terminalServer.removeSection.json +3 -3
- models/mutation.policy.terminalServer.updatePolicy.json +12 -12
- models/mutation.policy.terminalServer.updateRule.json +6 -6
- models/mutation.policy.terminalServer.updateSection.json +3 -3
- models/mutation.policy.wanFirewall.addRule.json +550 -103
- models/mutation.policy.wanFirewall.addSection.json +3 -3
- models/mutation.policy.wanFirewall.createPolicyRevision.json +226 -109
- models/mutation.policy.wanFirewall.discardPolicyRevision.json +226 -109
- models/mutation.policy.wanFirewall.moveRule.json +220 -103
- models/mutation.policy.wanFirewall.moveSection.json +3 -3
- models/mutation.policy.wanFirewall.publishPolicyRevision.json +226 -109
- models/mutation.policy.wanFirewall.removeRule.json +220 -103
- models/mutation.policy.wanFirewall.removeSection.json +3 -3
- models/mutation.policy.wanFirewall.updatePolicy.json +226 -109
- models/mutation.policy.wanFirewall.updateRule.json +541 -103
- models/mutation.policy.wanFirewall.updateSection.json +3 -3
- models/mutation.policy.wanNetwork.addRule.json +90 -90
- models/mutation.policy.wanNetwork.addSection.json +3 -3
- models/mutation.policy.wanNetwork.createPolicyRevision.json +96 -96
- models/mutation.policy.wanNetwork.discardPolicyRevision.json +96 -96
- models/mutation.policy.wanNetwork.moveRule.json +90 -90
- models/mutation.policy.wanNetwork.moveSection.json +3 -3
- models/mutation.policy.wanNetwork.publishPolicyRevision.json +96 -96
- models/mutation.policy.wanNetwork.removeRule.json +90 -90
- models/mutation.policy.wanNetwork.removeSection.json +3 -3
- models/mutation.policy.wanNetwork.updatePolicy.json +96 -96
- models/mutation.policy.wanNetwork.updateRule.json +90 -90
- models/mutation.policy.wanNetwork.updateSection.json +3 -3
- models/mutation.site.addBgpPeer.json +10 -10
- models/mutation.site.addIpsecIkeV2SiteTunnels.json +2 -2
- models/mutation.site.addSocketAddOnCard.json +2 -2
- models/mutation.site.assignSiteBwLicense.json +12879 -0
- models/mutation.site.removeBgpPeer.json +10 -10
- models/mutation.site.removeIpsecIkeV2SiteTunnels.json +2 -2
- models/mutation.site.removeSecondaryAwsVSocket.json +375 -0
- models/mutation.site.removeSecondaryAzureVSocket.json +354 -0
- models/mutation.site.removeSiteBwLicense.json +12822 -0
- models/mutation.site.removeSocketAddOnCard.json +2 -2
- models/mutation.site.replaceSiteBwLicense.json +12939 -0
- models/mutation.site.startSiteUpgrade.json +36 -15
- models/mutation.site.updateBgpPeer.json +10 -10
- models/mutation.site.updateIpsecIkeV2SiteTunnels.json +2 -2
- models/mutation.site.updateSecondaryAwsVSocket.json +643 -0
- models/mutation.site.updateSecondaryAzureVSocket.json +565 -0
- models/mutation.site.updateSiteBwLicense.json +12882 -0
- models/mutation.site.updateSiteGeneralDetails.json +724 -1
- models/mutation.sites.addBgpPeer.json +10 -10
- models/mutation.sites.addIpsecIkeV2SiteTunnels.json +2 -2
- models/mutation.sites.addSocketAddOnCard.json +2 -2
- models/mutation.sites.assignSiteBwLicense.json +12879 -0
- models/mutation.sites.removeBgpPeer.json +10 -10
- models/mutation.sites.removeIpsecIkeV2SiteTunnels.json +2 -2
- models/mutation.sites.removeSecondaryAwsVSocket.json +375 -0
- models/mutation.sites.removeSecondaryAzureVSocket.json +354 -0
- models/mutation.sites.removeSiteBwLicense.json +12822 -0
- models/mutation.sites.removeSocketAddOnCard.json +2 -2
- models/mutation.sites.replaceSiteBwLicense.json +12939 -0
- models/mutation.sites.startSiteUpgrade.json +36 -15
- models/mutation.sites.updateBgpPeer.json +10 -10
- models/mutation.sites.updateIpsecIkeV2SiteTunnels.json +2 -2
- models/mutation.sites.updateSecondaryAwsVSocket.json +643 -0
- models/mutation.sites.updateSecondaryAzureVSocket.json +565 -0
- models/mutation.sites.updateSiteBwLicense.json +12882 -0
- models/mutation.sites.updateSiteGeneralDetails.json +724 -1
- models/mutation.xdr.addStoryComment.json +1 -1
- models/mutation.xdr.analystFeedback.json +84 -84
- models/mutation.xdr.deleteStoryComment.json +1 -1
- models/query.accountManagement.json +97 -0
- models/query.accountMetrics.json +45 -45
- models/query.accountSnapshot.json +30 -30
- models/query.admin.json +6 -6
- models/query.admins.json +13 -13
- models/query.appStats.json +915 -867
- models/query.appStatsTimeSeries.json +692 -656
- models/query.auditFeed.json +6 -6
- models/query.catalogs.json +52 -52
- models/query.container.json +16 -16
- models/query.devices.json +20 -93
- models/query.entityLookup.json +2 -2
- models/query.events.json +288 -384
- models/query.eventsFeed.json +73 -97
- models/query.eventsTimeSeries.json +219 -291
- models/query.groups.group.members.json +3058 -0
- models/query.groups.groupList.json +6474 -0
- models/query.groups.whereUsed.json +697 -0
- models/query.hardware.json +27 -7
- models/query.hardwareManagement.json +8 -8
- models/query.licensing.json +3487 -1324
- models/query.policy.appTenantRestriction.policy.json +3086 -0
- models/query.policy.dynamicIpAllocation.policy.json +1934 -0
- models/query.policy.internetFirewall.policy.json +7833 -0
- models/query.policy.json +233 -0
- models/query.policy.remotePortFwd.policy.json +2387 -0
- models/query.policy.socketLan.policy.json +7140 -0
- models/query.policy.terminalServer.policy.json +1632 -0
- models/query.policy.wanFirewall.policy.json +9212 -0
- models/query.policy.wanNetwork.policy.json +8010 -0
- models/query.popLocations.json +2878 -0
- models/query.sandbox.json +5 -5
- models/query.site.availableVersionList.json +365 -0
- models/query.site.bgpPeer.json +1917 -0
- models/query.site.bgpPeerList.json +2076 -0
- models/query.site.cloudInterconnectConnectionConnectivity.json +298 -0
- models/query.site.cloudInterconnectPhysicalConnection.json +728 -0
- models/query.site.cloudInterconnectPhysicalConnectionId.json +660 -0
- models/query.site.secondaryAwsVSocket.json +340 -0
- models/query.site.secondaryAzureVSocket.json +319 -0
- models/query.site.siteBgpStatus.json +869 -0
- models/query.socketPortMetrics.json +2410 -0
- models/query.socketPortMetricsTimeSeries.json +2361 -0
- models/query.xdr.stories.json +104 -104
- models/query.xdr.story.json +93 -93
- schema/catolib.py +34 -18
- schema/remove_policyid.py +89 -0
- schema/remove_policyid_mutations.py +89 -0
- {catocli-2.0.4.dist-info → catocli-2.1.0.dist-info}/entry_points.txt +0 -0
- {catocli-2.0.4.dist-info → catocli-2.1.0.dist-info/licenses}/LICENSE +0 -0
|
@@ -1354,7 +1354,7 @@
|
|
|
1354
1354
|
"enumValues": null,
|
|
1355
1355
|
"fields": {
|
|
1356
1356
|
"analystFeedback": {
|
|
1357
|
-
"alias": "
|
|
1357
|
+
"alias": "analystFeedbackMergedIncident: analystFeedback",
|
|
1358
1358
|
"args": {},
|
|
1359
1359
|
"deprecationReason": null,
|
|
1360
1360
|
"description": "Fields related to analysts research of the threat incident",
|
|
@@ -1625,7 +1625,7 @@
|
|
|
1625
1625
|
"varName": "analystFeedback"
|
|
1626
1626
|
},
|
|
1627
1627
|
"connectionType": {
|
|
1628
|
-
"alias": "
|
|
1628
|
+
"alias": "connectionTypeMergedIncident: connectionType",
|
|
1629
1629
|
"args": {},
|
|
1630
1630
|
"deprecationReason": null,
|
|
1631
1631
|
"description": "Connection for the incident",
|
|
@@ -1716,7 +1716,7 @@
|
|
|
1716
1716
|
"varName": "description"
|
|
1717
1717
|
},
|
|
1718
1718
|
"engineType": {
|
|
1719
|
-
"alias": "
|
|
1719
|
+
"alias": "engineTypeMergedIncident: engineType",
|
|
1720
1720
|
"args": {},
|
|
1721
1721
|
"deprecationReason": null,
|
|
1722
1722
|
"description": "XDR engine involved with the incident",
|
|
@@ -1883,7 +1883,7 @@
|
|
|
1883
1883
|
"varName": "predictedThreatType"
|
|
1884
1884
|
},
|
|
1885
1885
|
"predictedVerdict": {
|
|
1886
|
-
"alias": "
|
|
1886
|
+
"alias": "predictedVerdictMergedIncident: predictedVerdict",
|
|
1887
1887
|
"args": {},
|
|
1888
1888
|
"deprecationReason": null,
|
|
1889
1889
|
"description": null,
|
|
@@ -1940,7 +1940,7 @@
|
|
|
1940
1940
|
"varName": "predictedVerdict"
|
|
1941
1941
|
},
|
|
1942
1942
|
"producer": {
|
|
1943
|
-
"alias": "
|
|
1943
|
+
"alias": "producerMergedIncident: producer",
|
|
1944
1944
|
"args": {},
|
|
1945
1945
|
"deprecationReason": null,
|
|
1946
1946
|
"description": "Producer (specific XDR engine and service) involved with the incident",
|
|
@@ -1986,14 +1986,14 @@
|
|
|
1986
1986
|
"name": "ThreatPrevention"
|
|
1987
1987
|
},
|
|
1988
1988
|
{
|
|
1989
|
-
"deprecationReason":
|
|
1989
|
+
"deprecationReason": "No longer supported",
|
|
1990
1990
|
"description": null,
|
|
1991
|
-
"isDeprecated":
|
|
1991
|
+
"isDeprecated": true,
|
|
1992
1992
|
"name": "NetworkMonitor"
|
|
1993
1993
|
},
|
|
1994
1994
|
{
|
|
1995
1995
|
"deprecationReason": null,
|
|
1996
|
-
"description":
|
|
1996
|
+
"description": "The producer of the Site Operations stories",
|
|
1997
1997
|
"isDeprecated": false,
|
|
1998
1998
|
"name": "NetworkXDR"
|
|
1999
1999
|
},
|
|
@@ -2095,7 +2095,7 @@
|
|
|
2095
2095
|
"varName": "research"
|
|
2096
2096
|
},
|
|
2097
2097
|
"site": {
|
|
2098
|
-
"alias": "
|
|
2098
|
+
"alias": "siteMergedIncident: site",
|
|
2099
2099
|
"args": {},
|
|
2100
2100
|
"deprecationReason": null,
|
|
2101
2101
|
"description": "Cato ID and name for the site",
|
|
@@ -2230,7 +2230,7 @@
|
|
|
2230
2230
|
"varName": "sourceIp"
|
|
2231
2231
|
},
|
|
2232
2232
|
"status": {
|
|
2233
|
-
"alias": "
|
|
2233
|
+
"alias": "statusMergedIncident: status",
|
|
2234
2234
|
"args": {},
|
|
2235
2235
|
"deprecationReason": null,
|
|
2236
2236
|
"description": "Status for the story",
|
|
@@ -2339,7 +2339,7 @@
|
|
|
2339
2339
|
"varName": "ticket"
|
|
2340
2340
|
},
|
|
2341
2341
|
"user": {
|
|
2342
|
-
"alias": "
|
|
2342
|
+
"alias": "userMergedIncident: user",
|
|
2343
2343
|
"args": {},
|
|
2344
2344
|
"deprecationReason": null,
|
|
2345
2345
|
"description": "Cato ID and name for the user",
|
|
@@ -2414,7 +2414,7 @@
|
|
|
2414
2414
|
"varName": "userRef"
|
|
2415
2415
|
},
|
|
2416
2416
|
"vendor": {
|
|
2417
|
-
"alias": "
|
|
2417
|
+
"alias": "vendorMergedIncident: vendor",
|
|
2418
2418
|
"args": {},
|
|
2419
2419
|
"deprecationReason": null,
|
|
2420
2420
|
"description": "Vendor that identified the incident, such as Cato or Microsoft",
|
|
@@ -3801,14 +3801,14 @@
|
|
|
3801
3801
|
"name": "ThreatPrevention"
|
|
3802
3802
|
},
|
|
3803
3803
|
{
|
|
3804
|
-
"deprecationReason":
|
|
3804
|
+
"deprecationReason": "No longer supported",
|
|
3805
3805
|
"description": null,
|
|
3806
|
-
"isDeprecated":
|
|
3806
|
+
"isDeprecated": true,
|
|
3807
3807
|
"name": "NetworkMonitor"
|
|
3808
3808
|
},
|
|
3809
3809
|
{
|
|
3810
3810
|
"deprecationReason": null,
|
|
3811
|
-
"description":
|
|
3811
|
+
"description": "The producer of the Site Operations stories",
|
|
3812
3812
|
"isDeprecated": false,
|
|
3813
3813
|
"name": "NetworkXDR"
|
|
3814
3814
|
},
|
|
@@ -4494,7 +4494,7 @@
|
|
|
4494
4494
|
"varName": "engines"
|
|
4495
4495
|
},
|
|
4496
4496
|
"eventData": {
|
|
4497
|
-
"alias": "
|
|
4497
|
+
"alias": "eventDataIncidentTargetRep: eventData",
|
|
4498
4498
|
"args": {},
|
|
4499
4499
|
"deprecationReason": null,
|
|
4500
4500
|
"description": null,
|
|
@@ -4631,7 +4631,7 @@
|
|
|
4631
4631
|
"varName": "ruleId"
|
|
4632
4632
|
},
|
|
4633
4633
|
"scanResult": {
|
|
4634
|
-
"alias": "
|
|
4634
|
+
"alias": "scanResultEvent: scanResult",
|
|
4635
4635
|
"args": {},
|
|
4636
4636
|
"deprecationReason": null,
|
|
4637
4637
|
"description": null,
|
|
@@ -4925,7 +4925,7 @@
|
|
|
4925
4925
|
"varName": "threatReference"
|
|
4926
4926
|
},
|
|
4927
4927
|
"type": {
|
|
4928
|
-
"alias": "
|
|
4928
|
+
"alias": "typeIncidentTargetRep: type",
|
|
4929
4929
|
"args": {},
|
|
4930
4930
|
"deprecationReason": null,
|
|
4931
4931
|
"description": null,
|
|
@@ -5102,7 +5102,7 @@
|
|
|
5102
5102
|
"varName": "info"
|
|
5103
5103
|
},
|
|
5104
5104
|
"key": {
|
|
5105
|
-
"alias": "
|
|
5105
|
+
"alias": "keyIncidentTimeseries: key",
|
|
5106
5106
|
"args": {},
|
|
5107
5107
|
"deprecationReason": null,
|
|
5108
5108
|
"description": null,
|
|
@@ -5272,7 +5272,7 @@
|
|
|
5272
5272
|
"varName": "sum"
|
|
5273
5273
|
},
|
|
5274
5274
|
"units": {
|
|
5275
|
-
"alias": "
|
|
5275
|
+
"alias": "unitsIncidentTimeseries: units",
|
|
5276
5276
|
"args": {},
|
|
5277
5277
|
"deprecationReason": null,
|
|
5278
5278
|
"description": "Identifies what unit of data this timeseries represents. Note that toRate is only available for particular types\nof data to make sense.",
|
|
@@ -6852,14 +6852,14 @@
|
|
|
6852
6852
|
"name": "ThreatPrevention"
|
|
6853
6853
|
},
|
|
6854
6854
|
{
|
|
6855
|
-
"deprecationReason":
|
|
6855
|
+
"deprecationReason": "No longer supported",
|
|
6856
6856
|
"description": null,
|
|
6857
|
-
"isDeprecated":
|
|
6857
|
+
"isDeprecated": true,
|
|
6858
6858
|
"name": "NetworkMonitor"
|
|
6859
6859
|
},
|
|
6860
6860
|
{
|
|
6861
6861
|
"deprecationReason": null,
|
|
6862
|
-
"description":
|
|
6862
|
+
"description": "The producer of the Site Operations stories",
|
|
6863
6863
|
"isDeprecated": false,
|
|
6864
6864
|
"name": "NetworkXDR"
|
|
6865
6865
|
},
|
|
@@ -7545,7 +7545,7 @@
|
|
|
7545
7545
|
"varName": "engines"
|
|
7546
7546
|
},
|
|
7547
7547
|
"eventData": {
|
|
7548
|
-
"alias": "
|
|
7548
|
+
"alias": "eventDataIncidentTargetRep: eventData",
|
|
7549
7549
|
"args": {},
|
|
7550
7550
|
"deprecationReason": null,
|
|
7551
7551
|
"description": null,
|
|
@@ -7682,7 +7682,7 @@
|
|
|
7682
7682
|
"varName": "ruleId"
|
|
7683
7683
|
},
|
|
7684
7684
|
"scanResult": {
|
|
7685
|
-
"alias": "
|
|
7685
|
+
"alias": "scanResultEvent: scanResult",
|
|
7686
7686
|
"args": {},
|
|
7687
7687
|
"deprecationReason": null,
|
|
7688
7688
|
"description": null,
|
|
@@ -7976,7 +7976,7 @@
|
|
|
7976
7976
|
"varName": "threatReference"
|
|
7977
7977
|
},
|
|
7978
7978
|
"type": {
|
|
7979
|
-
"alias": "
|
|
7979
|
+
"alias": "typeIncidentTargetRep: type",
|
|
7980
7980
|
"args": {},
|
|
7981
7981
|
"deprecationReason": null,
|
|
7982
7982
|
"description": null,
|
|
@@ -8153,7 +8153,7 @@
|
|
|
8153
8153
|
"varName": "info"
|
|
8154
8154
|
},
|
|
8155
8155
|
"key": {
|
|
8156
|
-
"alias": "
|
|
8156
|
+
"alias": "keyIncidentTimeseries: key",
|
|
8157
8157
|
"args": {},
|
|
8158
8158
|
"deprecationReason": null,
|
|
8159
8159
|
"description": null,
|
|
@@ -8323,7 +8323,7 @@
|
|
|
8323
8323
|
"varName": "sum"
|
|
8324
8324
|
},
|
|
8325
8325
|
"units": {
|
|
8326
|
-
"alias": "
|
|
8326
|
+
"alias": "unitsIncidentTimeseries: units",
|
|
8327
8327
|
"args": {},
|
|
8328
8328
|
"deprecationReason": null,
|
|
8329
8329
|
"description": "Identifies what unit of data this timeseries represents. Note that toRate is only available for particular types\nof data to make sense.",
|
|
@@ -8587,7 +8587,7 @@
|
|
|
8587
8587
|
"enumValues": null,
|
|
8588
8588
|
"fields": {
|
|
8589
8589
|
"activities": {
|
|
8590
|
-
"alias": "
|
|
8590
|
+
"alias": "activitiesCatoEndpointAlert: activities",
|
|
8591
8591
|
"args": {},
|
|
8592
8592
|
"deprecationReason": null,
|
|
8593
8593
|
"description": "Unique Cato IDs for the activities related to the alert",
|
|
@@ -8766,7 +8766,7 @@
|
|
|
8766
8766
|
"varName": "endpointProtectionProfile"
|
|
8767
8767
|
},
|
|
8768
8768
|
"engineType": {
|
|
8769
|
-
"alias": "
|
|
8769
|
+
"alias": "engineTypeCatoEndpointAlert: engineType",
|
|
8770
8770
|
"args": {},
|
|
8771
8771
|
"deprecationReason": null,
|
|
8772
8772
|
"description": "Enum for the EPP engine related to this story",
|
|
@@ -8872,7 +8872,7 @@
|
|
|
8872
8872
|
"varName": "localIp"
|
|
8873
8873
|
},
|
|
8874
8874
|
"mitreSubTechnique": {
|
|
8875
|
-
"alias": "
|
|
8875
|
+
"alias": "mitreSubTechniqueCatoEndpointAlert: mitreSubTechnique",
|
|
8876
8876
|
"args": {},
|
|
8877
8877
|
"deprecationReason": null,
|
|
8878
8878
|
"description": "MITRE ATT&CK\u00ae sub-technique for the threat",
|
|
@@ -8948,7 +8948,7 @@
|
|
|
8948
8948
|
"varName": "mitre"
|
|
8949
8949
|
},
|
|
8950
8950
|
"mitreTechnique": {
|
|
8951
|
-
"alias": "
|
|
8951
|
+
"alias": "mitreTechniqueCatoEndpointAlert: mitreTechnique",
|
|
8952
8952
|
"args": {},
|
|
8953
8953
|
"deprecationReason": null,
|
|
8954
8954
|
"description": "MITRE ATT&CK\u00ae technique for the threat",
|
|
@@ -9024,7 +9024,7 @@
|
|
|
9024
9024
|
"varName": "mitre"
|
|
9025
9025
|
},
|
|
9026
9026
|
"resources": {
|
|
9027
|
-
"alias": "
|
|
9027
|
+
"alias": "resourcesCatoEndpointAlert: resources",
|
|
9028
9028
|
"args": {},
|
|
9029
9029
|
"deprecationReason": null,
|
|
9030
9030
|
"description": "Data for the remediation status of the alert",
|
|
@@ -9082,7 +9082,7 @@
|
|
|
9082
9082
|
"varName": "id"
|
|
9083
9083
|
},
|
|
9084
9084
|
"remediationStatus": {
|
|
9085
|
-
"alias": "
|
|
9085
|
+
"alias": "remediationStatusCatoResource: remediationStatus",
|
|
9086
9086
|
"args": {},
|
|
9087
9087
|
"deprecationReason": null,
|
|
9088
9088
|
"description": "Enum for the remediation status associated with this resource",
|
|
@@ -10449,7 +10449,7 @@
|
|
|
10449
10449
|
"varName": "catoResource"
|
|
10450
10450
|
},
|
|
10451
10451
|
"status": {
|
|
10452
|
-
"alias": "
|
|
10452
|
+
"alias": "statusCatoEndpointAlert: status",
|
|
10453
10453
|
"args": {},
|
|
10454
10454
|
"deprecationReason": null,
|
|
10455
10455
|
"description": "Enum for the remediation status of the EPP alert",
|
|
@@ -11794,14 +11794,14 @@
|
|
|
11794
11794
|
"name": "ThreatPrevention"
|
|
11795
11795
|
},
|
|
11796
11796
|
{
|
|
11797
|
-
"deprecationReason":
|
|
11797
|
+
"deprecationReason": "No longer supported",
|
|
11798
11798
|
"description": null,
|
|
11799
|
-
"isDeprecated":
|
|
11799
|
+
"isDeprecated": true,
|
|
11800
11800
|
"name": "NetworkMonitor"
|
|
11801
11801
|
},
|
|
11802
11802
|
{
|
|
11803
11803
|
"deprecationReason": null,
|
|
11804
|
-
"description":
|
|
11804
|
+
"description": "The producer of the Site Operations stories",
|
|
11805
11805
|
"isDeprecated": false,
|
|
11806
11806
|
"name": "NetworkXDR"
|
|
11807
11807
|
},
|
|
@@ -12457,7 +12457,7 @@
|
|
|
12457
12457
|
"enumValues": null,
|
|
12458
12458
|
"fields": {
|
|
12459
12459
|
"activities": {
|
|
12460
|
-
"alias": "
|
|
12460
|
+
"alias": "activitiesMicrosoftDefenderEndpointAlert: activities",
|
|
12461
12461
|
"args": {},
|
|
12462
12462
|
"deprecationReason": null,
|
|
12463
12463
|
"description": null,
|
|
@@ -12656,7 +12656,7 @@
|
|
|
12656
12656
|
"varName": "category"
|
|
12657
12657
|
},
|
|
12658
12658
|
"classification": {
|
|
12659
|
-
"alias": "
|
|
12659
|
+
"alias": "classificationMicrosoftDefenderEndpointAlert: classification",
|
|
12660
12660
|
"args": {},
|
|
12661
12661
|
"deprecationReason": null,
|
|
12662
12662
|
"description": null,
|
|
@@ -12830,7 +12830,7 @@
|
|
|
12830
12830
|
"varName": "destinationUrl"
|
|
12831
12831
|
},
|
|
12832
12832
|
"detectionSource": {
|
|
12833
|
-
"alias": "
|
|
12833
|
+
"alias": "detectionSourceMicrosoftDefenderEndpointAlert: detectionSource",
|
|
12834
12834
|
"args": {},
|
|
12835
12835
|
"deprecationReason": null,
|
|
12836
12836
|
"description": null,
|
|
@@ -12959,7 +12959,7 @@
|
|
|
12959
12959
|
"varName": "detectionSource"
|
|
12960
12960
|
},
|
|
12961
12961
|
"determination": {
|
|
12962
|
-
"alias": "
|
|
12962
|
+
"alias": "determinationMicrosoftDefenderEndpointAlert: determination",
|
|
12963
12963
|
"args": {},
|
|
12964
12964
|
"deprecationReason": null,
|
|
12965
12965
|
"description": null,
|
|
@@ -13197,7 +13197,7 @@
|
|
|
13197
13197
|
"varName": "localIp"
|
|
13198
13198
|
},
|
|
13199
13199
|
"mitreSubTechnique": {
|
|
13200
|
-
"alias": "
|
|
13200
|
+
"alias": "mitreSubTechniqueMicrosoftDefenderEndpointAlert: mitreSubTechnique",
|
|
13201
13201
|
"args": {},
|
|
13202
13202
|
"deprecationReason": null,
|
|
13203
13203
|
"description": null,
|
|
@@ -13273,7 +13273,7 @@
|
|
|
13273
13273
|
"varName": "mitre"
|
|
13274
13274
|
},
|
|
13275
13275
|
"mitreTechnique": {
|
|
13276
|
-
"alias": "
|
|
13276
|
+
"alias": "mitreTechniqueMicrosoftDefenderEndpointAlert: mitreTechnique",
|
|
13277
13277
|
"args": {},
|
|
13278
13278
|
"deprecationReason": null,
|
|
13279
13279
|
"description": null,
|
|
@@ -13429,7 +13429,7 @@
|
|
|
13429
13429
|
"varName": "resolvedDateTime"
|
|
13430
13430
|
},
|
|
13431
13431
|
"resources": {
|
|
13432
|
-
"alias": "
|
|
13432
|
+
"alias": "resourcesMicrosoftDefenderEndpointAlert: resources",
|
|
13433
13433
|
"args": {},
|
|
13434
13434
|
"deprecationReason": null,
|
|
13435
13435
|
"description": null,
|
|
@@ -13487,7 +13487,7 @@
|
|
|
13487
13487
|
"varName": "id"
|
|
13488
13488
|
},
|
|
13489
13489
|
"remediationStatus": {
|
|
13490
|
-
"alias": "
|
|
13490
|
+
"alias": "remediationStatusMicrosoftEndpointResource: remediationStatus",
|
|
13491
13491
|
"args": {},
|
|
13492
13492
|
"deprecationReason": null,
|
|
13493
13493
|
"description": null,
|
|
@@ -13660,7 +13660,7 @@
|
|
|
13660
13660
|
"varName": "remediationStatusDetails"
|
|
13661
13661
|
},
|
|
13662
13662
|
"roles": {
|
|
13663
|
-
"alias": "
|
|
13663
|
+
"alias": "rolesMicrosoftEndpointResource: roles",
|
|
13664
13664
|
"args": {},
|
|
13665
13665
|
"deprecationReason": null,
|
|
13666
13666
|
"description": null,
|
|
@@ -13803,7 +13803,7 @@
|
|
|
13803
13803
|
"varName": "tags"
|
|
13804
13804
|
},
|
|
13805
13805
|
"verdict": {
|
|
13806
|
-
"alias": "
|
|
13806
|
+
"alias": "verdictMicrosoftEndpointResource: verdict",
|
|
13807
13807
|
"args": {},
|
|
13808
13808
|
"deprecationReason": null,
|
|
13809
13809
|
"description": null,
|
|
@@ -16047,7 +16047,7 @@
|
|
|
16047
16047
|
"varName": "microsoftEndpointResource"
|
|
16048
16048
|
},
|
|
16049
16049
|
"status": {
|
|
16050
|
-
"alias": "
|
|
16050
|
+
"alias": "statusMicrosoftDefenderEndpointAlert: status",
|
|
16051
16051
|
"args": {},
|
|
16052
16052
|
"deprecationReason": null,
|
|
16053
16053
|
"description": null,
|
|
@@ -17614,14 +17614,14 @@
|
|
|
17614
17614
|
"name": "ThreatPrevention"
|
|
17615
17615
|
},
|
|
17616
17616
|
{
|
|
17617
|
-
"deprecationReason":
|
|
17617
|
+
"deprecationReason": "No longer supported",
|
|
17618
17618
|
"description": null,
|
|
17619
|
-
"isDeprecated":
|
|
17619
|
+
"isDeprecated": true,
|
|
17620
17620
|
"name": "NetworkMonitor"
|
|
17621
17621
|
},
|
|
17622
17622
|
{
|
|
17623
17623
|
"deprecationReason": null,
|
|
17624
|
-
"description":
|
|
17624
|
+
"description": "The producer of the Site Operations stories",
|
|
17625
17625
|
"isDeprecated": false,
|
|
17626
17626
|
"name": "NetworkXDR"
|
|
17627
17627
|
},
|
|
@@ -19756,7 +19756,7 @@
|
|
|
19756
19756
|
"varName": "acknowledged"
|
|
19757
19757
|
},
|
|
19758
19758
|
"bgpConnection": {
|
|
19759
|
-
"alias": "
|
|
19759
|
+
"alias": "bgpConnectionNetworkTimelineEvent: bgpConnection",
|
|
19760
19760
|
"args": {},
|
|
19761
19761
|
"deprecationReason": null,
|
|
19762
19762
|
"description": null,
|
|
@@ -19930,7 +19930,7 @@
|
|
|
19930
19930
|
"varName": "description"
|
|
19931
19931
|
},
|
|
19932
19932
|
"deviceConfigHaRole": {
|
|
19933
|
-
"alias": "
|
|
19933
|
+
"alias": "deviceConfigHaRoleNetworkTimelineEvent: deviceConfigHaRole",
|
|
19934
19934
|
"args": {},
|
|
19935
19935
|
"deprecationReason": null,
|
|
19936
19936
|
"description": null,
|
|
@@ -19975,7 +19975,7 @@
|
|
|
19975
19975
|
"varName": "deviceConfigHaRole"
|
|
19976
19976
|
},
|
|
19977
19977
|
"deviceHaRoleState": {
|
|
19978
|
-
"alias": "
|
|
19978
|
+
"alias": "deviceHaRoleStateNetworkTimelineEvent: deviceHaRoleState",
|
|
19979
19979
|
"args": {},
|
|
19980
19980
|
"deprecationReason": null,
|
|
19981
19981
|
"description": null,
|
|
@@ -20043,7 +20043,7 @@
|
|
|
20043
20043
|
"varName": "eventIds"
|
|
20044
20044
|
},
|
|
20045
20045
|
"eventType": {
|
|
20046
|
-
"alias": "
|
|
20046
|
+
"alias": "eventTypeNetworkTimelineEvent: eventType",
|
|
20047
20047
|
"args": {},
|
|
20048
20048
|
"deprecationReason": null,
|
|
20049
20049
|
"description": null,
|
|
@@ -20174,7 +20174,7 @@
|
|
|
20174
20174
|
"varName": "linkConfigBandwidth"
|
|
20175
20175
|
},
|
|
20176
20176
|
"linkConfigPrecedence": {
|
|
20177
|
-
"alias": "
|
|
20177
|
+
"alias": "linkConfigPrecedenceNetworkTimelineEvent: linkConfigPrecedence",
|
|
20178
20178
|
"args": {},
|
|
20179
20179
|
"deprecationReason": null,
|
|
20180
20180
|
"description": null,
|
|
@@ -20265,7 +20265,7 @@
|
|
|
20265
20265
|
"varName": "linkName"
|
|
20266
20266
|
},
|
|
20267
20267
|
"linkQualityIssue": {
|
|
20268
|
-
"alias": "
|
|
20268
|
+
"alias": "linkQualityIssueNetworkTimelineEvent: linkQualityIssue",
|
|
20269
20269
|
"args": {},
|
|
20270
20270
|
"deprecationReason": null,
|
|
20271
20271
|
"description": null,
|
|
@@ -20438,7 +20438,7 @@
|
|
|
20438
20438
|
"varName": "linkQualityIssue"
|
|
20439
20439
|
},
|
|
20440
20440
|
"linkStatus": {
|
|
20441
|
-
"alias": "
|
|
20441
|
+
"alias": "linkStatusNetworkTimelineEvent: linkStatus",
|
|
20442
20442
|
"args": {},
|
|
20443
20443
|
"deprecationReason": null,
|
|
20444
20444
|
"description": null,
|
|
@@ -20503,7 +20503,7 @@
|
|
|
20503
20503
|
"varName": "muted"
|
|
20504
20504
|
},
|
|
20505
20505
|
"networkEventSource": {
|
|
20506
|
-
"alias": "
|
|
20506
|
+
"alias": "networkEventSourceNetworkTimelineEvent: networkEventSource",
|
|
20507
20507
|
"args": {},
|
|
20508
20508
|
"deprecationReason": null,
|
|
20509
20509
|
"description": null,
|
|
@@ -20862,14 +20862,14 @@
|
|
|
20862
20862
|
"name": "ThreatPrevention"
|
|
20863
20863
|
},
|
|
20864
20864
|
{
|
|
20865
|
-
"deprecationReason":
|
|
20865
|
+
"deprecationReason": "No longer supported",
|
|
20866
20866
|
"description": null,
|
|
20867
|
-
"isDeprecated":
|
|
20867
|
+
"isDeprecated": true,
|
|
20868
20868
|
"name": "NetworkMonitor"
|
|
20869
20869
|
},
|
|
20870
20870
|
{
|
|
20871
20871
|
"deprecationReason": null,
|
|
20872
|
-
"description":
|
|
20872
|
+
"description": "The producer of the Site Operations stories",
|
|
20873
20873
|
"isDeprecated": false,
|
|
20874
20874
|
"name": "NetworkXDR"
|
|
20875
20875
|
},
|
|
@@ -22217,7 +22217,7 @@
|
|
|
22217
22217
|
"varName": "ruleId"
|
|
22218
22218
|
},
|
|
22219
22219
|
"scanResult": {
|
|
22220
|
-
"alias": "
|
|
22220
|
+
"alias": "scanResultEvent: scanResult",
|
|
22221
22221
|
"args": {},
|
|
22222
22222
|
"deprecationReason": null,
|
|
22223
22223
|
"description": null,
|
|
@@ -23290,14 +23290,14 @@
|
|
|
23290
23290
|
"name": "ThreatPrevention"
|
|
23291
23291
|
},
|
|
23292
23292
|
{
|
|
23293
|
-
"deprecationReason":
|
|
23293
|
+
"deprecationReason": "No longer supported",
|
|
23294
23294
|
"description": null,
|
|
23295
|
-
"isDeprecated":
|
|
23295
|
+
"isDeprecated": true,
|
|
23296
23296
|
"name": "NetworkMonitor"
|
|
23297
23297
|
},
|
|
23298
23298
|
{
|
|
23299
23299
|
"deprecationReason": null,
|
|
23300
|
-
"description":
|
|
23300
|
+
"description": "The producer of the Site Operations stories",
|
|
23301
23301
|
"isDeprecated": false,
|
|
23302
23302
|
"name": "NetworkXDR"
|
|
23303
23303
|
},
|
|
@@ -24015,7 +24015,7 @@
|
|
|
24015
24015
|
"varName": "engines"
|
|
24016
24016
|
},
|
|
24017
24017
|
"eventData": {
|
|
24018
|
-
"alias": "
|
|
24018
|
+
"alias": "eventDataIncidentTargetRep: eventData",
|
|
24019
24019
|
"args": {},
|
|
24020
24020
|
"deprecationReason": null,
|
|
24021
24021
|
"description": null,
|
|
@@ -24152,7 +24152,7 @@
|
|
|
24152
24152
|
"varName": "ruleId"
|
|
24153
24153
|
},
|
|
24154
24154
|
"scanResult": {
|
|
24155
|
-
"alias": "
|
|
24155
|
+
"alias": "scanResultEvent: scanResult",
|
|
24156
24156
|
"args": {},
|
|
24157
24157
|
"deprecationReason": null,
|
|
24158
24158
|
"description": null,
|
|
@@ -24446,7 +24446,7 @@
|
|
|
24446
24446
|
"varName": "threatReference"
|
|
24447
24447
|
},
|
|
24448
24448
|
"type": {
|
|
24449
|
-
"alias": "
|
|
24449
|
+
"alias": "typeIncidentTargetRep: type",
|
|
24450
24450
|
"args": {},
|
|
24451
24451
|
"deprecationReason": null,
|
|
24452
24452
|
"description": null,
|
|
@@ -24623,7 +24623,7 @@
|
|
|
24623
24623
|
"varName": "info"
|
|
24624
24624
|
},
|
|
24625
24625
|
"key": {
|
|
24626
|
-
"alias": "
|
|
24626
|
+
"alias": "keyIncidentTimeseries: key",
|
|
24627
24627
|
"args": {},
|
|
24628
24628
|
"deprecationReason": null,
|
|
24629
24629
|
"description": null,
|
|
@@ -24793,7 +24793,7 @@
|
|
|
24793
24793
|
"varName": "sum"
|
|
24794
24794
|
},
|
|
24795
24795
|
"units": {
|
|
24796
|
-
"alias": "
|
|
24796
|
+
"alias": "unitsIncidentTimeseries: units",
|
|
24797
24797
|
"args": {},
|
|
24798
24798
|
"deprecationReason": null,
|
|
24799
24799
|
"description": "Identifies what unit of data this timeseries represents. Note that toRate is only available for particular types\nof data to make sense.",
|
|
@@ -25667,7 +25667,7 @@
|
|
|
25667
25667
|
"varName": "ruleId"
|
|
25668
25668
|
},
|
|
25669
25669
|
"scanResult": {
|
|
25670
|
-
"alias": "
|
|
25670
|
+
"alias": "scanResultEvent: scanResult",
|
|
25671
25671
|
"args": {},
|
|
25672
25672
|
"deprecationReason": null,
|
|
25673
25673
|
"description": null,
|
|
@@ -26226,14 +26226,14 @@
|
|
|
26226
26226
|
"name": "ThreatPrevention"
|
|
26227
26227
|
},
|
|
26228
26228
|
{
|
|
26229
|
-
"deprecationReason":
|
|
26229
|
+
"deprecationReason": "No longer supported",
|
|
26230
26230
|
"description": null,
|
|
26231
|
-
"isDeprecated":
|
|
26231
|
+
"isDeprecated": true,
|
|
26232
26232
|
"name": "NetworkMonitor"
|
|
26233
26233
|
},
|
|
26234
26234
|
{
|
|
26235
26235
|
"deprecationReason": null,
|
|
26236
|
-
"description":
|
|
26236
|
+
"description": "The producer of the Site Operations stories",
|
|
26237
26237
|
"isDeprecated": false,
|
|
26238
26238
|
"name": "NetworkXDR"
|
|
26239
26239
|
},
|
|
@@ -26951,7 +26951,7 @@
|
|
|
26951
26951
|
"varName": "engines"
|
|
26952
26952
|
},
|
|
26953
26953
|
"eventData": {
|
|
26954
|
-
"alias": "
|
|
26954
|
+
"alias": "eventDataIncidentTargetRep: eventData",
|
|
26955
26955
|
"args": {},
|
|
26956
26956
|
"deprecationReason": null,
|
|
26957
26957
|
"description": null,
|
|
@@ -27088,7 +27088,7 @@
|
|
|
27088
27088
|
"varName": "ruleId"
|
|
27089
27089
|
},
|
|
27090
27090
|
"scanResult": {
|
|
27091
|
-
"alias": "
|
|
27091
|
+
"alias": "scanResultEvent: scanResult",
|
|
27092
27092
|
"args": {},
|
|
27093
27093
|
"deprecationReason": null,
|
|
27094
27094
|
"description": null,
|
|
@@ -27382,7 +27382,7 @@
|
|
|
27382
27382
|
"varName": "threatReference"
|
|
27383
27383
|
},
|
|
27384
27384
|
"type": {
|
|
27385
|
-
"alias": "
|
|
27385
|
+
"alias": "typeIncidentTargetRep: type",
|
|
27386
27386
|
"args": {},
|
|
27387
27387
|
"deprecationReason": null,
|
|
27388
27388
|
"description": null,
|
|
@@ -28073,7 +28073,7 @@
|
|
|
28073
28073
|
"varName": "info"
|
|
28074
28074
|
},
|
|
28075
28075
|
"key": {
|
|
28076
|
-
"alias": "
|
|
28076
|
+
"alias": "keyIncidentTimeseries: key",
|
|
28077
28077
|
"args": {},
|
|
28078
28078
|
"deprecationReason": null,
|
|
28079
28079
|
"description": null,
|
|
@@ -28243,7 +28243,7 @@
|
|
|
28243
28243
|
"varName": "sum"
|
|
28244
28244
|
},
|
|
28245
28245
|
"units": {
|
|
28246
|
-
"alias": "
|
|
28246
|
+
"alias": "unitsIncidentTimeseries: units",
|
|
28247
28247
|
"args": {},
|
|
28248
28248
|
"deprecationReason": null,
|
|
28249
28249
|
"description": "Identifies what unit of data this timeseries represents. Note that toRate is only available for particular types\nof data to make sense.",
|
|
@@ -28575,7 +28575,7 @@
|
|
|
28575
28575
|
"varName": "additionalInfo"
|
|
28576
28576
|
},
|
|
28577
28577
|
"analystInfo": {
|
|
28578
|
-
"alias": "
|
|
28578
|
+
"alias": "analystInfoTimelineItem: analystInfo",
|
|
28579
28579
|
"args": {},
|
|
28580
28580
|
"deprecationReason": null,
|
|
28581
28581
|
"description": "Data about the analyst for this timeline item (ie. name, email)",
|
|
@@ -28648,7 +28648,7 @@
|
|
|
28648
28648
|
"varName": "analystInfo"
|
|
28649
28649
|
},
|
|
28650
28650
|
"category": {
|
|
28651
|
-
"alias": "
|
|
28651
|
+
"alias": "categoryTimelineItem: category",
|
|
28652
28652
|
"args": {},
|
|
28653
28653
|
"deprecationReason": null,
|
|
28654
28654
|
"description": "Icon for the timeline item",
|
|
@@ -28785,7 +28785,7 @@
|
|
|
28785
28785
|
"varName": "descriptions"
|
|
28786
28786
|
},
|
|
28787
28787
|
"type": {
|
|
28788
|
-
"alias": "
|
|
28788
|
+
"alias": "typeTimelineItem: type",
|
|
28789
28789
|
"args": {},
|
|
28790
28790
|
"deprecationReason": null,
|
|
28791
28791
|
"description": "Type of threat assigned by the analyst",
|