contentctl 5.5.5__py3-none-any.whl → 5.5.7__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (7) hide show
  1. contentctl/objects/playbook_tags.py +242 -8
  2. contentctl/output/attack_nav_output.py +1 -1
  3. {contentctl-5.5.5.dist-info → contentctl-5.5.7.dist-info}/METADATA +2 -2
  4. {contentctl-5.5.5.dist-info → contentctl-5.5.7.dist-info}/RECORD +7 -7
  5. {contentctl-5.5.5.dist-info → contentctl-5.5.7.dist-info}/LICENSE.md +0 -0
  6. {contentctl-5.5.5.dist-info → contentctl-5.5.7.dist-info}/WHEEL +0 -0
  7. {contentctl-5.5.5.dist-info → contentctl-5.5.7.dist-info}/entry_points.txt +0 -0
contentctl/objects/playbook_tags.py CHANGED
@@ -10,9 +10,13 @@ class PlaybookProduct(str, enum.Enum):
10
10
 
11
11
 
12
12
  class PlaybookUseCase(str, enum.Enum):
13
- PHISHING = "Phishing"
13
+ COLLECTION = "Collection"
14
14
  ENDPOINT = "Endpoint"
15
15
  ENRICHMENT = "Enrichment"
16
+ MALWARE = "Malware"
17
+ PHISHING = "Phishing"
18
+ RESPONSE = "Response"
19
+ UTILITY = "Utility"
16
20
 
17
21
 
18
22
  class PlaybookType(str, enum.Enum):
@@ -26,20 +30,250 @@ class VpeType(str, enum.Enum):
26
30
 
27
31
 
28
32
  class DefendTechnique(str, enum.Enum):
33
+ D3_AA = "D3-AA"
34
+ D3_ABPI = "D3-ABPI"
35
+ D3_ACA = "D3-ACA"
36
+ D3_ACH = "D3-ACH"
37
+ D3_AH = "D3-AH"
38
+ D3_AI = "D3-AI"
29
39
  D3_AL = "D3-AL"
30
- D3_DNSDL = "D3-DNSDL"
40
+ D3_ALLM = "D3-ALLM"
41
+ D3_AM = "D3-AM"
42
+ D3_AMED = "D3-AMED"
43
+ D3_ANAA = "D3-ANAA"
44
+ D3_ANCI = "D3-ANCI"
45
+ D3_ANET = "D3-ANET"
46
+ D3_APA = "D3-APA"
47
+ D3_APLM = "D3-APLM"
48
+ D3_AVE = "D3-AVE"
49
+ D3_AZET = "D3-AZET"
50
+ D3_BA = "D3-BA"
51
+ D3_BAN = "D3-BAN"
52
+ D3_BDI = "D3-BDI"
53
+ D3_BSE = "D3-BSE"
54
+ D3_CA = "D3-CA"
55
+ D3_CAA = "D3-CAA"
56
+ D3_CBAN = "D3-CBAN"
57
+ D3_CCSA = "D3-CCSA"
58
+ D3_CE = "D3-CE"
59
+ D3_CERO = "D3-CERO"
60
+ D3_CF = "D3-CF"
61
+ D3_CFC = "D3-CFC"
62
+ D3_CH = "D3-CH"
63
+ D3_CHN = "D3-CHN"
64
+ D3_CI = "D3-CI"
65
+ D3_CIA = "D3-CIA"
66
+ D3_CM = "D3-CM"
67
+ D3_CNE = "D3-CNE"
68
+ D3_CNR = "D3-CNR"
69
+ D3_CNS = "D3-CNS"
70
+ D3_CP = "D3-CP"
71
+ D3_CQ = "D3-CQ"
72
+ D3_CR = "D3-CR"
73
+ D3_CRO = "D3-CRO"
74
+ D3_CS = "D3-CS"
75
+ D3_CSPP = "D3-CSPP"
76
+ D3_CTS = "D3-CTS"
77
+ D3_CV = "D3-CV"
31
78
  D3_DA = "D3-DA"
79
+ D3_DAM = "D3-DAM"
80
+ D3_DCE = "D3-DCE"
81
+ D3_DE = "D3-DE"
82
+ D3_DEM = "D3-DEM"
83
+ D3_DENCR = "D3-DENCR"
84
+ D3_DF = "D3-DF"
85
+ D3_DI = "D3-DI"
86
+ D3_DKE = "D3-DKE"
87
+ D3_DKF = "D3-DKF"
88
+ D3_DKP = "D3-DKP"
89
+ D3_DLIC = "D3-DLIC"
90
+ D3_DNR = "D3-DNR"
91
+ D3_DNRA = "D3-DNRA"
92
+ D3_DNSAL = "D3-DNSAL"
93
+ D3_DNSCE = "D3-DNSCE"
94
+ D3_DNSDL = "D3-DNSDL"
95
+ D3_DNSTA = "D3-DNSTA"
96
+ D3_DO = "D3-DO"
97
+ D3_DP = "D3-DP"
98
+ D3_DPLM = "D3-DPLM"
99
+ D3_DPR = "D3-DPR"
100
+ D3_DQSA = "D3-DQSA"
101
+ D3_DRT = "D3-DRT"
102
+ D3_DST = "D3-DST"
103
+ D3_DTP = "D3-DTP"
104
+ D3_DUC = "D3-DUC"
105
+ D3_EAL = "D3-EAL"
106
+ D3_EBWSAM = "D3-EBWSAM"
107
+ D3_EDL = "D3-EDL"
108
+ D3_EF = "D3-EF"
109
+ D3_EFA = "D3-EFA"
110
+ D3_EHB = "D3-EHB"
111
+ D3_EHPV = "D3-EHPV"
112
+ D3_EI = "D3-EI"
113
+ D3_ER = "D3-ER"
114
+ D3_ET = "D3-ET"
115
+ D3_FA = "D3-FA"
116
+ D3_FAPA = "D3-FAPA"
117
+ D3_FBA = "D3-FBA"
118
+ D3_FC = "D3-FC"
119
+ D3_FCA = "D3-FCA"
120
+ D3_FCDC = "D3-FCDC"
121
+ D3_FCOA = "D3-FCOA"
122
+ D3_FCR = "D3-FCR"
123
+ D3_FE = "D3-FE"
124
+ D3_FEMC = "D3-FEMC"
125
+ D3_FEV = "D3-FEV"
126
+ D3_FFV = "D3-FFV"
127
+ D3_FH = "D3-FH"
128
+ D3_FHRA = "D3-FHRA"
129
+ D3_FIM = "D3-FIM"
130
+ D3_FISV = "D3-FISV"
131
+ D3_FMBV = "D3-FMBV"
132
+ D3_FMCV = "D3-FMCV"
133
+ D3_FMVV = "D3-FMVV"
134
+ D3_FRDDL = "D3-FRDDL"
135
+ D3_FRIDL = "D3-FRIDL"
136
+ D3_FV = "D3-FV"
137
+ D3_HBPI = "D3-HBPI"
138
+ D3_HCI = "D3-HCI"
139
+ D3_HD = "D3-HD"
140
+ D3_HDDL = "D3-HDDL"
141
+ D3_HDL = "D3-HDL"
142
+ D3_HR = "D3-HR"
143
+ D3_HS = "D3-HS"
32
144
  D3_IAA = "D3-IAA"
145
+ D3_IBCA = "D3-IBCA"
146
+ D3_ID = "D3-ID"
147
+ D3_IDA = "D3-IDA"
148
+ D3_IHN = "D3-IHN"
149
+ D3_IOPR = "D3-IOPR"
150
+ D3_IPCTA = "D3-IPCTA"
151
+ D3_IPRA = "D3-IPRA"
33
152
  D3_IRA = "D3-IRA"
153
+ D3_IRV = "D3-IRV"
154
+ D3_ISVA = "D3-ISVA"
155
+ D3_ITF = "D3-ITF"
156
+ D3_JFAPA = "D3-JFAPA"
157
+ D3_KBPI = "D3-KBPI"
158
+ D3_LAM = "D3-LAM"
159
+ D3_LAMED = "D3-LAMED"
160
+ D3_LFAM = "D3-LFAM"
161
+ D3_LFP = "D3-LFP"
162
+ D3_LLM = "D3-LLM"
163
+ D3_MA = "D3-MA"
164
+ D3_MAN = "D3-MAN"
165
+ D3_MBSV = "D3-MBSV"
166
+ D3_MBT = "D3-MBT"
167
+ D3_MENCR = "D3-MENCR"
168
+ D3_MFA = "D3-MFA"
169
+ D3_MH = "D3-MH"
170
+ D3_NAM = "D3-NAM"
171
+ D3_NI = "D3-NI"
172
+ D3_NM = "D3-NM"
173
+ D3_NNI = "D3-NNI"
174
+ D3_NPC = "D3-NPC"
175
+ D3_NRAM = "D3-NRAM"
176
+ D3_NTA = "D3-NTA"
177
+ D3_NTCD = "D3-NTCD"
178
+ D3_NTF = "D3-NTF"
179
+ D3_NTPM = "D3-NTPM"
180
+ D3_NTSA = "D3-NTSA"
181
+ D3_NVA = "D3-NVA"
182
+ D3_OAM = "D3-OAM"
183
+ D3_ODM = "D3-ODM"
184
+ D3_OE = "D3-OE"
185
+ D3_OM = "D3-OM"
186
+ D3_ORA = "D3-ORA"
187
+ D3_OSM = "D3-OSM"
34
188
  D3_OTF = "D3-OTF"
35
- D3_ER = "D3-ER"
189
+ D3_OTP = "D3-OTP"
190
+ D3_PA = "D3-PA"
191
+ D3_PAM = "D3-PAM"
192
+ D3_PAN = "D3-PAN"
193
+ D3_PBWSAM = "D3-PBWSAM"
194
+ D3_PCA = "D3-PCA"
195
+ D3_PCSV = "D3-PCSV"
196
+ D3_PE = "D3-PE"
197
+ D3_PFV = "D3-PFV"
198
+ D3_PH = "D3-PH"
199
+ D3_PHDURA = "D3-PHDURA"
200
+ D3_PLA = "D3-PLA"
201
+ D3_PLLM = "D3-PLLM"
202
+ D3_PLM = "D3-PLM"
203
+ D3_PM = "D3-PM"
204
+ D3_PMAD = "D3-PMAD"
205
+ D3_PR = "D3-PR"
206
+ D3_PS = "D3-PS"
207
+ D3_PSA = "D3-PSA"
208
+ D3_PSEP = "D3-PSEP"
209
+ D3_PSMD = "D3-PSMD"
210
+ D3_PT = "D3-PT"
211
+ D3_PV = "D3-PV"
212
+ D3_PWA = "D3-PWA"
213
+ D3_RA = "D3-RA"
214
+ D3_RAM = "D3-RAM"
215
+ D3_RAPA = "D3-RAPA"
216
+ D3_RC = "D3-RC"
217
+ D3_RD = "D3-RD"
218
+ D3_RDI = "D3-RDI"
36
219
  D3_RE = "D3-RE"
37
- D3_URA = "D3-URA"
38
- D3_DNRA = "D3-DNRA"
39
- D3_IPRA = "D3-IPRA"
40
- D3_FHRA = "D3-FHRA"
41
- D3_SRA = "D3-SRA"
220
+ D3_RF = "D3-RF"
221
+ D3_RFAM = "D3-RFAM"
222
+ D3_RFS = "D3-RFS"
223
+ D3_RIC = "D3-RIC"
224
+ D3_RKD = "D3-RKD"
225
+ D3_RN = "D3-RN"
226
+ D3_RNA = "D3-RNA"
227
+ D3_RO = "D3-RO"
228
+ D3_RPA = "D3-RPA"
229
+ D3_RRID = "D3-RRID"
230
+ D3_RS = "D3-RS"
231
+ D3_RTA = "D3-RTA"
232
+ D3_RTSD = "D3-RTSD"
42
233
  D3_RUAA = "D3-RUAA"
234
+ D3_SAOR = "D3-SAOR"
235
+ D3_SBV = "D3-SBV"
236
+ D3_SCA = "D3-SCA"
237
+ D3_SCF = "D3-SCF"
238
+ D3_SCH = "D3-SCH"
239
+ D3_SCP = "D3-SCP"
240
+ D3_SDA = "D3-SDA"
241
+ D3_SDM = "D3-SDM"
242
+ D3_SEA = "D3-SEA"
243
+ D3_SFA = "D3-SFA"
244
+ D3_SFCV = "D3-SFCV"
245
+ D3_SFV = "D3-SFV"
246
+ D3_SHN = "D3-SHN"
247
+ D3_SICA = "D3-SICA"
248
+ D3_SJA = "D3-SJA"
249
+ D3_SMRA = "D3-SMRA"
250
+ D3_SPP = "D3-SPP"
251
+ D3_SRA = "D3-SRA"
252
+ D3_SSC = "D3-SSC"
253
+ D3_ST = "D3-ST"
254
+ D3_SU = "D3-SU"
255
+ D3_SVCDM = "D3-SVCDM"
256
+ D3_SWI = "D3-SWI"
257
+ D3_SYSDM = "D3-SYSDM"
258
+ D3_SYSM = "D3-SYSM"
259
+ D3_SYSVA = "D3-SYSVA"
260
+ D3_TAAN = "D3-TAAN"
261
+ D3_TB = "D3-TB"
262
+ D3_TBA = "D3-TBA"
263
+ D3_TBI = "D3-TBI"
264
+ D3_TL = "D3-TL"
265
+ D3_UA = "D3-UA"
266
+ D3_UAP = "D3-UAP"
267
+ D3_UBA = "D3-UBA"
268
+ D3_UDTA = "D3-UDTA"
269
+ D3_UGLPA = "D3-UGLPA"
270
+ D3_ULA = "D3-ULA"
271
+ D3_URA = "D3-URA"
272
+ D3_USICA = "D3-USICA"
273
+ D3_VI = "D3-VI"
274
+ D3_VTV = "D3-VTV"
275
+ D3_WSAA = "D3-WSAA"
276
+ D3_WSAM = "D3-WSAM"
43
277
 
44
278
 
45
279
  class PlaybookTag(BaseModel):
contentctl/output/attack_nav_output.py CHANGED
@@ -88,7 +88,7 @@ class AttackNavOutput:
88
88
  layer: LayerData = {
89
89
  "name": self.layer_name,
90
90
  "versions": {
91
- "attack": "14", # Update as needed
91
+ "attack": "17", # Update as needed
92
92
  "navigator": "5.1.0",
93
93
  "layer": "4.5",
94
94
  },
{contentctl-5.5.5.dist-info → contentctl-5.5.7.dist-info}/METADATA RENAMED
@@ -1,6 +1,6 @@
1
1
  Metadata-Version: 2.3
2
2
  Name: contentctl
3
- Version: 5.5.5
3
+ Version: 5.5.7
4
4
  Summary: Splunk Content Control Tool
5
5
  License: Apache 2.0
6
6
  Author: STRT
@@ -27,7 +27,7 @@ Requires-Dist: semantic-version (>=2.10.0,<3.0.0)
27
27
  Requires-Dist: setuptools (>=69.5.1,<81.0.0)
28
28
  Requires-Dist: splunk-sdk (>=2.0.2,<3.0.0)
29
29
  Requires-Dist: tqdm (>=4.66.5,<5.0.0)
30
- Requires-Dist: tyro (>=0.9.2,<0.10.0)
30
+ Requires-Dist: tyro (>=0.9.2,<0.9.23)
31
31
  Requires-Dist: xmltodict (>=0.13,<0.15)
32
32
  Description-Content-Type: text/markdown
33
33
 
{contentctl-5.5.5.dist-info → contentctl-5.5.7.dist-info}/RECORD RENAMED
@@ -74,7 +74,7 @@ contentctl/objects/mitre_attack_enrichment.py,sha256=PCakRksW5qrTENIZ7JirEZplE9x
74
74
  contentctl/objects/notable_action.py,sha256=sW5XlpGznMHqyBmGXtXrl22hWLiCoKkfGCasGtK3rGo,1607
75
75
  contentctl/objects/notable_event.py,sha256=jMmD1sGtTvOFNfjAfienWD2-sVL67axzdLrLZSGQ8Sw,421
76
76
  contentctl/objects/playbook.py,sha256=veG2luPfFrOMdzl99D8gsO85HYSJ8kZMYWj3GG64HKk,2879
77
- contentctl/objects/playbook_tags.py,sha256=O5obkQyb82YdJEii8ZJEQtrHtLOSnAvAkT1qIgpCK2s,1547
77
+ contentctl/objects/playbook_tags.py,sha256=J9sBP54mXW2e3X9EtIhL6vZ3kqDPFnvBkJB-zcj0XFA,6777
78
78
  contentctl/objects/rba.py,sha256=2xE_DXhQvG6tVLJTXYaFEBm9owePE4QG0NVgdcVgoiY,3547
79
79
  contentctl/objects/removed_security_content_object.py,sha256=bx-gVCqzT81E5jKncMD3-yKawTnl3tWsuzRBmsAqeqQ,1852
80
80
  contentctl/objects/risk_analysis_action.py,sha256=v-TQktXEEzbGzmTtqwEykXoSKdGnIlK_JojnqvvAE1s,4370
@@ -92,7 +92,7 @@ contentctl/objects/unit_test.py,sha256=-rtSmZ8N2UZ4NkDsfzNXzXiF6dTDwt_jsQ_14xp0h
92
92
  contentctl/objects/unit_test_baseline.py,sha256=ezg8Ctih_3che2ln2tuVCAtRPHaf5tDMR3dGb34MqaA,287
93
93
  contentctl/objects/unit_test_result.py,sha256=gqHqYN5XGBKdV-mdKhAdwfOw4_PpN3i9z_b6ciByDSc,2928
94
94
  contentctl/output/api_json_output.py,sha256=AwuXFVzg3bY0DUsYaEGM73LAr9mJ5nxkOmUdVJgTzRs,8563
95
- contentctl/output/attack_nav_output.py,sha256=IyZJIjO6vfwk_X01VR1lnOsIRDDV8HnW0RInk6G9Flw,7088
95
+ contentctl/output/attack_nav_output.py,sha256=-zK9zxBFWQooLjfLeCJaKARemA1BhoiEYLYYT2Or9PQ,7088
96
96
  contentctl/output/attack_nav_writer.py,sha256=AiQU3q8hzz_lJECI-sjyqOsWx64HUugg3aAHEeZl-qM,2750
97
97
  contentctl/output/conf_output.py,sha256=OJ4u38FEkuBHvIiK_57HoxUJasWV2rkX2abVamKh3Qg,11045
98
98
  contentctl/output/conf_writer.py,sha256=9eqt2tm1xjs397pwWLz5oPJcMHbs62ejRG7KghGQQCI,15137
@@ -164,8 +164,8 @@ contentctl/templates/detections/web/.gitkeep,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRk
164
164
  contentctl/templates/macros/security_content_ctime.yml,sha256=Gg1YNllHVsX_YB716H1SJLWzxXZEfuJlnsgB2fuyoHU,159
165
165
  contentctl/templates/macros/security_content_summariesonly.yml,sha256=9BYUxAl2E4Nwh8K19F3AJS8Ka7ceO6ZDBjFiO3l3LY0,162
166
166
  contentctl/templates/stories/cobalt_strike.yml,sha256=uj8idtDNOAIqpZ9p8usQg6mop1CQkJ5TlB4Q7CJdTIE,3082
167
- contentctl-5.5.5.dist-info/LICENSE.md,sha256=hQWUayRk-pAiOZbZnuy8djmoZkjKBx8MrCFpW-JiOgo,11344
168
- contentctl-5.5.5.dist-info/METADATA,sha256=zo-Vr7E9Iw_7yg6cJzc2ricwTE_5gLQ_VzXrCmo23SE,5134
169
- contentctl-5.5.5.dist-info/WHEEL,sha256=b4K_helf-jlQoXBBETfwnf4B04YC67LOev0jo4fX5m8,88
170
- contentctl-5.5.5.dist-info/entry_points.txt,sha256=5bjZ2NkbQfSwK47uOnA77yCtjgXhvgxnmCQiynRF_-U,57
171
- contentctl-5.5.5.dist-info/RECORD,,
167
+ contentctl-5.5.7.dist-info/LICENSE.md,sha256=hQWUayRk-pAiOZbZnuy8djmoZkjKBx8MrCFpW-JiOgo,11344
168
+ contentctl-5.5.7.dist-info/METADATA,sha256=aLnpJb80CX7LeslFcm27e93UDgwHybfEsoF_o0x2VRw,5134
169
+ contentctl-5.5.7.dist-info/WHEEL,sha256=b4K_helf-jlQoXBBETfwnf4B04YC67LOev0jo4fX5m8,88
170
+ contentctl-5.5.7.dist-info/entry_points.txt,sha256=5bjZ2NkbQfSwK47uOnA77yCtjgXhvgxnmCQiynRF_-U,57
171
+ contentctl-5.5.7.dist-info/RECORD,,