howler-api 3.4.0.dev962__py3-none-any.whl → 3.4.0.dev970__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- howler/odm/models/ecs/file.py +29 -29
- {howler_api-3.4.0.dev962.dist-info → howler_api-3.4.0.dev970.dist-info}/METADATA +1 -1
- {howler_api-3.4.0.dev962.dist-info → howler_api-3.4.0.dev970.dist-info}/RECORD +5 -5
- {howler_api-3.4.0.dev962.dist-info → howler_api-3.4.0.dev970.dist-info}/WHEEL +0 -0
- {howler_api-3.4.0.dev962.dist-info → howler_api-3.4.0.dev970.dist-info}/entry_points.txt +0 -0
howler/odm/models/ecs/file.py
CHANGED
|
@@ -1,5 +1,3 @@
|
|
|
1
|
-
from typing import Optional
|
|
2
|
-
|
|
3
1
|
from howler import odm
|
|
4
2
|
from howler.odm.models.ecs.code_signature import CodeSignature
|
|
5
3
|
from howler.odm.models.ecs.elf import ELF
|
|
@@ -17,67 +15,69 @@ FILE_TYPE = ["file", "dir", "symlink"]
|
|
|
17
15
|
description="A file is defined as a set of information that has been created on, or has existed on a filesystem.",
|
|
18
16
|
)
|
|
19
17
|
class File(odm.Model):
|
|
20
|
-
accessed:
|
|
21
|
-
attributes:
|
|
22
|
-
created:
|
|
23
|
-
ctime:
|
|
24
|
-
device:
|
|
25
|
-
directory:
|
|
18
|
+
accessed: str | None = odm.Optional(odm.Date(description="Last time the file was accessed."))
|
|
19
|
+
attributes: list[str] | None = odm.Optional(odm.List(odm.Keyword(), description="Array of file attributes."))
|
|
20
|
+
created: str | None = odm.Optional(odm.Date(description="File creation time."))
|
|
21
|
+
ctime: str | None = odm.Optional(odm.Date(description="Last time the file attributes or metadata changed."))
|
|
22
|
+
device: str | None = odm.Optional(odm.Keyword(description="Device that is the source of the file."))
|
|
23
|
+
directory: str | None = odm.Optional(
|
|
26
24
|
odm.Keyword(
|
|
27
25
|
description="Directory where the file is located. It should include the drive letter, when appropriate."
|
|
28
26
|
)
|
|
29
27
|
)
|
|
30
|
-
drive_letter:
|
|
28
|
+
drive_letter: str | None = odm.Optional(
|
|
31
29
|
odm.Keyword(description="Drive letter where the file is located. This field is only relevant on Windows.")
|
|
32
30
|
)
|
|
33
|
-
extension:
|
|
34
|
-
fork_name:
|
|
31
|
+
extension: str | None = odm.Optional(odm.Keyword(description="File extension, excluding the leading dot."))
|
|
32
|
+
fork_name: str | None = odm.Optional(
|
|
35
33
|
odm.Keyword(description="A fork is additional data associated with a filesystem object.")
|
|
36
34
|
)
|
|
37
|
-
gid:
|
|
38
|
-
group:
|
|
39
|
-
inode:
|
|
40
|
-
mime_type:
|
|
35
|
+
gid: str | None = odm.Optional(odm.Keyword(description="Primary group ID (GID) of the file."))
|
|
36
|
+
group: str | None = odm.Optional(odm.Keyword(description="Primary group name of the file."))
|
|
37
|
+
inode: str | None = odm.Optional(odm.Keyword(description="Inode representing the file in the filesystem."))
|
|
38
|
+
mime_type: str | None = odm.Optional(
|
|
41
39
|
odm.Keyword(
|
|
42
40
|
description="MIME type should identify the format of the file or stream of "
|
|
43
41
|
"bytes using IANA official types, where possible."
|
|
44
42
|
)
|
|
45
43
|
)
|
|
46
|
-
mode:
|
|
47
|
-
mtime:
|
|
48
|
-
name:
|
|
44
|
+
mode: str | None = odm.Optional(odm.Keyword(description="Mode of the file in octal representation."))
|
|
45
|
+
mtime: str | None = odm.Optional(odm.Date(description="Last time the file content was modified."))
|
|
46
|
+
name: str | None = odm.Optional(
|
|
49
47
|
odm.Keyword(description="Name of the file including the extension, without the directory.")
|
|
50
48
|
)
|
|
51
|
-
owner:
|
|
52
|
-
path:
|
|
49
|
+
owner: str | None = odm.Optional(odm.Keyword(description="File owner’s username."))
|
|
50
|
+
path: str | None = odm.Optional(
|
|
53
51
|
odm.Keyword(
|
|
54
52
|
description="Full path to the file, including the file name. "
|
|
55
53
|
"It should include the drive letter, when appropriate."
|
|
56
54
|
)
|
|
57
55
|
)
|
|
58
|
-
size:
|
|
59
|
-
target_path:
|
|
60
|
-
type:
|
|
61
|
-
uid:
|
|
56
|
+
size: int | None = odm.Long(description="File size in bytes.", optional=True)
|
|
57
|
+
target_path: str | None = odm.Optional(odm.Keyword(description="Target path for symlinks."))
|
|
58
|
+
type: str | None = odm.Optional(odm.Enum(values=FILE_TYPE, description="File type (file, dir, or symlink)."))
|
|
59
|
+
uid: str | None = odm.Optional(
|
|
62
60
|
odm.Keyword(description="The user ID (UID) or security identifier (SID) of the file owner.")
|
|
63
61
|
)
|
|
64
62
|
|
|
65
|
-
code_signature:
|
|
63
|
+
code_signature: CodeSignature | None = odm.Optional(
|
|
66
64
|
odm.Compound(
|
|
67
65
|
CodeSignature,
|
|
68
66
|
description="These fields contain information about binary code signatures.",
|
|
69
67
|
)
|
|
70
68
|
)
|
|
71
|
-
elf:
|
|
69
|
+
elf: ELF | None = odm.Optional(
|
|
72
70
|
odm.Compound(
|
|
73
71
|
ELF,
|
|
74
72
|
description="These fields contain Linux Executable Linkable Format (ELF) metadata.",
|
|
75
73
|
)
|
|
76
74
|
)
|
|
77
|
-
hash:
|
|
75
|
+
hash: Hashes | None = odm.Optional(
|
|
78
76
|
odm.Compound(
|
|
79
77
|
Hashes,
|
|
80
|
-
description="
|
|
78
|
+
description="Hashes, usually file hashes.",
|
|
81
79
|
)
|
|
82
80
|
)
|
|
83
|
-
pe:
|
|
81
|
+
pe: PE | None = odm.Optional(
|
|
82
|
+
odm.Compound(PE, description="These fields contain Windows Portable Executable (PE) metadata.")
|
|
83
|
+
)
|
|
@@ -114,7 +114,7 @@ howler/odm/models/ecs/email.py,sha256=sKiws9D4l6Prw4cc9LG_UAmjN4chcmVy201bSmVn-8
|
|
|
114
114
|
howler/odm/models/ecs/error.py,sha256=hUogevpLF7VBaetkntezhitMMqguRnksSWuF6JXjxmQ,461
|
|
115
115
|
howler/odm/models/ecs/event.py,sha256=HuLtLUY_iomrSwjMMt_D2tEJnl68yGLpn5PdfwyN1PI,5020
|
|
116
116
|
howler/odm/models/ecs/faas.py,sha256=AakHGqY6b-kFs03xxN_HhjNAFWXqtfggai_E8CtE7vE,1229
|
|
117
|
-
howler/odm/models/ecs/file.py,sha256=
|
|
117
|
+
howler/odm/models/ecs/file.py,sha256=iim1QclJvjRNO3uokbaMKIUdd5To5Ida9kMtN7uH0Fw,3958
|
|
118
118
|
howler/odm/models/ecs/geo.py,sha256=R6yKphOQMgrUEC7bnTpM95N40AS5Bi5mjfTrp-2wL1g,1408
|
|
119
119
|
howler/odm/models/ecs/group.py,sha256=AdK7S7XK3tYJdRlCrzCNfO499aJ0io9VeSe5xFwi4Ns,765
|
|
120
120
|
howler/odm/models/ecs/hash.py,sha256=X8_M5mPoff3hmESVropUKVCCMK8ZPiBUdjpXYGDdgak,700
|
|
@@ -198,7 +198,7 @@ howler/utils/path.py,sha256=DfOU4i4zSs4wchHoE8iE7aWVLkTxiC_JRGepF2hBYBk,690
|
|
|
198
198
|
howler/utils/socket_utils.py,sha256=nz1SklC9xBHUSfHyTJjpq3mbozX1GDf01WzdGxfaUII,2212
|
|
199
199
|
howler/utils/str_utils.py,sha256=HE8Hqh2HlOLaj16w0H9zKOyDJLp-f1LQ50y_WeGZaEk,8389
|
|
200
200
|
howler/utils/uid.py,sha256=p9dsqyvZ-lpiAuzZWCPCeEM99kdk0Ly9czf04HNdSuw,1341
|
|
201
|
-
howler_api-3.4.0.
|
|
202
|
-
howler_api-3.4.0.
|
|
203
|
-
howler_api-3.4.0.
|
|
204
|
-
howler_api-3.4.0.
|
|
201
|
+
howler_api-3.4.0.dev970.dist-info/METADATA,sha256=NTuHgaGd9W70dInWb-7af612d1_AkiGe4nulWL5crnQ,2879
|
|
202
|
+
howler_api-3.4.0.dev970.dist-info/WHEEL,sha256=EGEvSphFYqXKs23-kQBeyNoJP1nrT8ZJKQoi5p5DYL8,88
|
|
203
|
+
howler_api-3.4.0.dev970.dist-info/entry_points.txt,sha256=Lu9SBGvwe0wczJHmc-RudC24lmQk7tv3ZBXon9RIihg,259
|
|
204
|
+
howler_api-3.4.0.dev970.dist-info/RECORD,,
|
|
File without changes
|
|
File without changes
|