howler-sentinel-plugin 0.2.0.dev104__py3-none-any.whl → 0.2.0.dev105__py3-none-any.whl

{howler_sentinel_plugin-0.2.0.dev104.dist-info → howler_sentinel_plugin-0.2.0.dev105.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: howler-sentinel-plugin
-Version: 0.2.0.dev104
+Version: 0.2.0.dev105
 Summary: A howler plugin for integration with Microsoft's Sentinel API
 License: MIT
 Author: CCCS

{howler_sentinel_plugin-0.2.0.dev104.dist-info → howler_sentinel_plugin-0.2.0.dev105.dist-info}/RECORD

@@ -1,5 +1,5 @@
 sentinel/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-sentinel/actions/azure_emit_hash.py,sha256=MeprMe58pac2ntnDanadsPNjXKmIEBSPchT55XMGFWs,3557
+sentinel/actions/azure_emit_hash.py,sha256=ES9u3iIkm18qcwVT7-f3r8K5d-haCnjSTC7cyOKxH7A,4000
 sentinel/actions/send_to_sentinel.py,sha256=s07DTPSVTSC4JwmUQe2q6W6MabfHtE43dmRj3nuE7EM,4021
 sentinel/actions/update_defender_xdr_alert.py,sha256=gXuVZfr7Ou0Lc6BuECmo18E8hfJPhUlM1VMKVCkofk4,6753
 sentinel/mapping/sentinel_incident.py,sha256=U7fIh8N4Jdr1A4z1E0jPRP28Ll0Cq7u9Q6292AnyRDI,9548
@@ -10,8 +10,8 @@ sentinel/odm/models/sentinel.py,sha256=XT3XdT92uoCV5vmY9dT1jmcxRyuu9vp1gE8AwZdKB
 sentinel/routes/__init__.py,sha256=JYmKRwIfEsiPos1XuMQ2mlGDbxk6TN_cVEM0K_RNze4,130
 sentinel/routes/ingest.py,sha256=_9OdOw_9nBJseKIBnmHDLjnqZ_bDdM4wfLpLrek4-ak,7018
 sentinel/utils/tenant_utils.py,sha256=nGOCbLzUx9OyATLAZ5UbW0WNao_1ioW4wL-htn2ltKU,1324
-howler_sentinel_plugin-0.2.0.dev104.dist-info/LICENSE,sha256=Wg2luVnxEkP2NSn11nh1US6W_nFFbICBAVTG9iG3t5M,1091
-howler_sentinel_plugin-0.2.0.dev104.dist-info/METADATA,sha256=ZLe75ogUfw2jpQnn5HFe-im3p0YJpzrg7_p7QjhinAE,749
-howler_sentinel_plugin-0.2.0.dev104.dist-info/WHEEL,sha256=b4K_helf-jlQoXBBETfwnf4B04YC67LOev0jo4fX5m8,88
-howler_sentinel_plugin-0.2.0.dev104.dist-info/entry_points.txt,sha256=4IJyMY0V49s3Wp659ngN_7U8g66-czeKxI-_dNAFP5g,60
-howler_sentinel_plugin-0.2.0.dev104.dist-info/RECORD,,
+howler_sentinel_plugin-0.2.0.dev105.dist-info/LICENSE,sha256=Wg2luVnxEkP2NSn11nh1US6W_nFFbICBAVTG9iG3t5M,1091
+howler_sentinel_plugin-0.2.0.dev105.dist-info/METADATA,sha256=XI_GN5e_-qHwfo7SpRzuMC0WVEk9s8Ok3e5jcX5mG2o,749
+howler_sentinel_plugin-0.2.0.dev105.dist-info/WHEEL,sha256=b4K_helf-jlQoXBBETfwnf4B04YC67LOev0jo4fX5m8,88
+howler_sentinel_plugin-0.2.0.dev105.dist-info/entry_points.txt,sha256=4IJyMY0V49s3Wp659ngN_7U8g66-czeKxI-_dNAFP5g,60
+howler_sentinel_plugin-0.2.0.dev105.dist-info/RECORD,,

sentinel/actions/azure_emit_hash.py

@@ -71,6 +71,14 @@ def execute(
                     },
                     timeout=5.0,
                 )
+                report.append(
+                    {
+                        "query": f"howler.id:{hit.howler.id}",
+                        "outcome": "success",
+                        "title": "Webhook Triggered",
+                        "message": f"Field {field} from alert {hit.howler.id} was successfully sent to url {url}.",
+                    }
+                )
             except Exception:
                 logger.exception("Exception on network call for alert %s", hit.howler.id)
                 report.append(
@@ -109,6 +117,7 @@ def specification():
             {
                 "args": {"url": [], "field": []},
                 "options": {"field": [field for field in Hit.flat_fields().keys() if field.endswith("sha256")]},
+                "validation": {"warn": {"query": "-_exists_:$field"}},
             }
         ],
         "triggers": VALID_TRIGGERS,