howler-sentinel-plugin 0.2.0.dev104__py3-none-any.whl → 0.2.0.dev113__py3-none-any.whl

{howler_sentinel_plugin-0.2.0.dev104.dist-info → howler_sentinel_plugin-0.2.0.dev113.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: howler-sentinel-plugin
-Version: 0.2.0.dev104
+Version: 0.2.0.dev113
 Summary: A howler plugin for integration with Microsoft's Sentinel API
 License: MIT
 Author: CCCS

howler_sentinel_plugin-0.2.0.dev113.dist-info/RECORD

@@ -0,0 +1,18 @@
+sentinel/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+sentinel/actions/azure_emit_hash.py,sha256=ES9u3iIkm18qcwVT7-f3r8K5d-haCnjSTC7cyOKxH7A,4000
+sentinel/actions/send_to_sentinel.py,sha256=RRmUSiPDKr7oQjA4f-iSGjEtziUQH77O2s-578pb1Uc,4022
+sentinel/actions/update_defender_xdr_alert.py,sha256=bHBHEZwAAT1pHTF2L4JK5gttzguq12NdV58fx0tj4dQ,6799
+sentinel/actions/update_defender_xdr_incident.py,sha256=HjvK8yTDafYePY5LoMkYat_cFUHnFWK3tzpCfAO3JNE,6854
+sentinel/mapping/sentinel_incident.py,sha256=U7fIh8N4Jdr1A4z1E0jPRP28Ll0Cq7u9Q6292AnyRDI,9548
+sentinel/mapping/xdr_alert.py,sha256=UPoqdZsjUXmJz0dCf_qMlh9Jr0D2HcSNOFvbg8lE4wY,18250
+sentinel/mapping/xdr_alert_evidence.py,sha256=iMn9Wd5NB7Wi9l0Fl0vmJhugX8L6hAO9jYA9AtLLX2o,31429
+sentinel/odm/hit.py,sha256=hAuO2ONMK3Ml8Xu6E7tHrmZ7M6HG5tT38RD9ZxwY254,666
+sentinel/odm/models/sentinel.py,sha256=XT3XdT92uoCV5vmY9dT1jmcxRyuu9vp1gE8AwZdKBIc,337
+sentinel/routes/__init__.py,sha256=JYmKRwIfEsiPos1XuMQ2mlGDbxk6TN_cVEM0K_RNze4,130
+sentinel/routes/ingest.py,sha256=c7GtZakMizDaubXDm_qtw4SXLJyvsHoMheADTIjIiTY,8821
+sentinel/utils/tenant_utils.py,sha256=nGOCbLzUx9OyATLAZ5UbW0WNao_1ioW4wL-htn2ltKU,1324
+howler_sentinel_plugin-0.2.0.dev113.dist-info/LICENSE,sha256=Wg2luVnxEkP2NSn11nh1US6W_nFFbICBAVTG9iG3t5M,1091
+howler_sentinel_plugin-0.2.0.dev113.dist-info/METADATA,sha256=21QcysnK4MtoG5BZ9VBzUYcQA5hAOrDYpmArynPt9HA,749
+howler_sentinel_plugin-0.2.0.dev113.dist-info/WHEEL,sha256=b4K_helf-jlQoXBBETfwnf4B04YC67LOev0jo4fX5m8,88
+howler_sentinel_plugin-0.2.0.dev113.dist-info/entry_points.txt,sha256=4IJyMY0V49s3Wp659ngN_7U8g66-czeKxI-_dNAFP5g,60
+howler_sentinel_plugin-0.2.0.dev113.dist-info/RECORD,,

sentinel/actions/azure_emit_hash.py

@@ -71,6 +71,14 @@ def execute(
                     },
                     timeout=5.0,
                 )
+                report.append(
+                    {
+                        "query": f"howler.id:{hit.howler.id}",
+                        "outcome": "success",
+                        "title": "Webhook Triggered",
+                        "message": f"Field {field} from alert {hit.howler.id} was successfully sent to url {url}.",
+                    }
+                )
             except Exception:
                 logger.exception("Exception on network call for alert %s", hit.howler.id)
                 report.append(
@@ -109,6 +117,7 @@ def specification():
             {
                 "args": {"url": [], "field": []},
                 "options": {"field": [field for field in Hit.flat_fields().keys() if field.endswith("sha256")]},
+                "validation": {"warn": {"query": "-_exists_:$field"}},
             }
         ],
         "triggers": VALID_TRIGGERS,

sentinel/actions/send_to_sentinel.py

@@ -101,7 +101,7 @@ def execute(query: str, **kwargs) -> list[dict[str, Any]]:
                 "query": f"howler.id:{hit.howler.id}",
                 "outcome": "success",
                 "title": "Alert updated in Sentinel",
-                "message": "Howler has successfuly propagated changes to this alert to Sentinel.",
+                "message": "Howler has successfully propagated changes to this alert to Sentinel.",
             }
         )
 

sentinel/actions/update_defender_xdr_alert.py

@@ -165,15 +165,15 @@ def execute(query: str, **kwargs):
                     "message": f"PATCH request to Microsoft Graph failed with status code {response.status_code}.",
                 }
             )
-
-        report.append(
-            {
-                "query": f"howler.id:{hit.howler.id}",
-                "outcome": "success",
-                "title": "Alert updated in XDR Defender",
-                "message": "Howler has successfuly propagated changes to this alert to XDR Defender.",
-            }
-        )
+        else:
+            report.append(
+                {
+                    "query": f"howler.id:{hit.howler.id}",
+                    "outcome": "success",
+                    "title": "Alert updated in XDR Defender",
+                    "message": "Howler has successfully propagated changes to this alert to XDR Defender.",
+                }
+            )
 
     return report
 

sentinel/actions/update_defender_xdr_incident.py

@@ -0,0 +1,194 @@
+import requests
+from howler.common.exceptions import HowlerRuntimeError
+from howler.common.loader import datastore
+from howler.common.logging import get_logger
+from howler.odm.models.action import VALID_TRIGGERS
+from howler.odm.models.hit import Hit
+from howler.odm.models.howler_data import Assessment, HitStatus
+
+from sentinel.utils.tenant_utils import get_token
+
+logger = get_logger(__file__)
+
+OPERATION_ID = "update_defender_xdr_incident"
+
+properties_map = {
+    "graph": {
+        "status": {
+            HitStatus.OPEN: "active",
+            HitStatus.IN_PROGRESS: "inProgress",
+            HitStatus.ON_HOLD: "inProgress",
+            HitStatus.RESOLVED: "resolved",
+        },
+        "classification": {
+            Assessment.AMBIGUOUS: "unknown",
+            Assessment.SECURITY: "informationalExpectedActivity",
+            Assessment.DEVELOPMENT: "informationalExpectedActivity",
+            Assessment.FALSE_POSITIVE: "falsePositive",
+            Assessment.LEGITIMATE: "informationalExpectedActivity",
+            Assessment.TRIVIAL: "falsePositive",
+            Assessment.RECON: "truePositive",
+            Assessment.ATTEMPT: "truePositive",
+            Assessment.COMPROMISE: "truePositive",
+            Assessment.MITIGATED: "truePositive",
+            None: "unknown",
+        },
+        "determination": {
+            Assessment.AMBIGUOUS: "unknown",
+            Assessment.SECURITY: "securityTesting",
+            Assessment.DEVELOPMENT: "confirmedUserActivity",
+            Assessment.FALSE_POSITIVE: "other",
+            Assessment.LEGITIMATE: "lineOfBusinessApplication",
+            Assessment.TRIVIAL: "other",
+            Assessment.RECON: "multiStagedAttack",
+            Assessment.ATTEMPT: "other",
+            Assessment.COMPROMISE: "maliciousUserActivity",
+            Assessment.MITIGATED: "other",
+            None: "unknown",
+        },
+    },
+}
+
+
+def execute(query: str, **kwargs):
+    """Update Microsoft Defender XDR incident.
+
+    Args:
+        query (str): The query on which to apply this automation.
+    """
+    report = []
+    ds = datastore()
+
+    hits: list[Hit] = ds.hit.search(query, as_obj=True)["items"]
+
+    if not hits:
+        report.append(
+            {
+                "query": query,
+                "outcome": "error",
+                "title": "No hits returned by query",
+                "message": f"No hits returned by '{query}'",
+            }
+        )
+        return report
+
+    for hit in hits:
+        if hit.azure and hit.azure.tenant_id:
+            tenant_id = hit.azure.tenant_id
+        elif hit.organization.id:
+            tenant_id = hit.organization.id
+        else:
+            report.append(
+                {
+                    "query": f"howler.id:{hit.howler.id}",
+                    "outcome": "skipped",
+                    "title": "Azure Tenant ID is missing",
+                    "message": "This incident does not have a set tenant ID.",
+                }
+            )
+            continue
+
+        try:
+            token = get_token(tenant_id, "https://graph.microsoft.com/.default")[0]
+        except HowlerRuntimeError as err:
+            logger.exception("Error on token fetching")
+            report.append(
+                {
+                    "query": f"howler.id:{hit.howler.id}",
+                    "outcome": "error",
+                    "title": "Invalid Credentials",
+                    "message": err.message,
+                }
+            )
+            continue
+
+        # Fetch incident details
+        incident_url = f"https://graph.microsoft.com/v1.0/security/incidents/{hit.sentinel.id}"
+        response = requests.get(incident_url, headers={"Authorization": f"Bearer {token}"}, timeout=5.0)
+        if not response.ok:
+            logger.warning(
+                "GET request to Microsoft Graph failed with status code %s. Content:\n%s",
+                response.status_code,
+                response.text,
+            )
+            report.append(
+                {
+                    "query": query,
+                    "outcome": "error",
+                    "title": "Microsoft Graph API request failed",
+                    "message": f"GET request to Microsoft Graph failed with status code {response.status_code}.",
+                }
+            )
+            continue
+
+        incident_data = response.json()
+
+        # Update incident
+        if (
+            "assessment" in hit.howler
+            and hit.howler.assessment in properties_map["graph"]["classification"]
+            and hit.howler.assessment in properties_map["graph"]["determination"]
+        ):
+            classification = properties_map["graph"]["classification"][hit.howler.assessment]
+            determination = properties_map["graph"]["determination"][hit.howler.assessment]
+        else:
+            classification = incident_data["classification"]
+            determination = incident_data["determination"]
+
+        status = properties_map["graph"]["status"][hit.howler.status]
+        assigned_to = incident_data["assignedTo"]
+
+        data = {
+            "assignedTo": assigned_to,
+            "classification": classification,
+            "determination": determination,
+            "status": status,
+        }
+
+        response = requests.patch(
+            incident_url,
+            json=data,
+            headers={"Authorization": f"Bearer {token}", "Content-Type": "application/json"},
+            timeout=5.0,
+        )
+        if not response.ok:
+            logger.warning(
+                "PATCH request to Microsoft Graph failed with status code %s. Content:\n%s",
+                response.status_code,
+                response.text,
+            )
+            report.append(
+                {
+                    "query": query,
+                    "outcome": "error",
+                    "title": "Microsoft Graph API request failed",
+                    "message": f"PATCH request to Microsoft Graph failed with status code {response.status_code}.",
+                }
+            )
+        else:
+            report.append(
+                {
+                    "query": f"howler.id:{hit.howler.id}",
+                    "outcome": "success",
+                    "title": "Incident updated in XDR Defender",
+                    "message": "Howler has successfully propagated changes to this incident to XDR Defender.",
+                }
+            )
+
+    return report
+
+
+def specification():
+    "Update Defender action specification"
+    return {
+        "id": OPERATION_ID,
+        "title": "Update Microsoft Defender XDR incident",
+        "priority": 8,
+        "description": {
+            "short": "Update Microsoft Defender XDR incident",
+            "long": execute.__doc__,
+        },
+        "roles": ["automation_basic"],
+        "steps": [{"args": {}, "options": {}, "validation": {}}],
+        "triggers": VALID_TRIGGERS,
+    }

sentinel/mapping/xdr_alert_evidence.py

@@ -232,10 +232,13 @@ class XDRAlertEvidence:
     @staticmethod
     def device_evidence(evidence: dict[str, Any]) -> dict[str, Any]:
         """Convert device evidence to howler evidence format."""
+        hostname = evidence.get("hostName")
+        if not hostname:
+            hostname = evidence.get("deviceDnsName")
         return {
             "host": {
                 "id": evidence.get("mdeDeviceId"),
-                "name": evidence.get("hostName"),
+                "name": hostname,
                 "domain": [evidence.get("ntDomain", "unknown")],
                 "os": {
                     "platform": evidence.get("osPlatform"),
@@ -668,51 +671,51 @@ class XDRAlertEvidence:
                 "status_remediation_details": evidence.get("remediationStatusDetails"),
             },
             "teams": {
-                "campaign_id": evidence.get("CampaignId"),
-                "channel_id": evidence.get("ChannelId"),
-                "delivery_action": evidence.get("DeliveryAction"),
-                "delivery_location": evidence.get("DeliveryLocation"),
-                "detailed_roles": evidence.get("DetailedRoles"),
+                "campaign_id": evidence.get("campaignId"),
+                "channel_id": evidence.get("channelId"),
+                "delivery_action": evidence.get("deliveryAction"),
+                "delivery_location": evidence.get("deliveryLocation"),
+                "detailed_roles": evidence.get("detailedRoles"),
                 "files": [
                     {
-                        "path": file.get("FileDetails", {}).get("FilePath"),
-                        "name": file.get("FileDetails", {}).get("FileName"),
+                        "path": file.get("fileDetails", {}).get("filePath"),
+                        "name": file.get("fileDetails", {}).get("fileName"),
                         "hash": {
-                            "sha1": file.get("FileDetails", {}).get("Sha1"),
-                            "sha256": file.get("FileDetails", {}).get("Sha256"),
-                            "md5": file.get("FileDetails", {}).get("Md5"),
+                            "sha1": file.get("fileDetails", {}).get("sha1"),
+                            "sha256": file.get("fileDetails", {}).get("sha256"),
+                            "md5": file.get("fileDetails", {}).get("md5"),
                         },
                         "code_signature": {
-                            "signing_id": file.get("FileDetails", {}).get("Signer"),
-                            "team_id": file.get("FileDetails", {}).get("Issuer"),
+                            "signing_id": file.get("fileDetails", {}).get("signer"),
+                            "team_id": file.get("fileDetails", {}).get("issuer"),
                         },
-                        "size": file.get("FileDetails", {}).get("FileSize"),
+                        "size": file.get("fileDetails", {}).get("fileSize"),
                     }
-                    for file in evidence.get("Files", [])
+                    for file in evidence.get("files", [])
                 ],
-                "group_id": evidence.get("GroupId"),
-                "is_external": evidence.get("IsExternal"),
-                "is_owned": evidence.get("IsOwned"),
-                "last_modified": evidence.get("LastModified"),
-                "message_direction": evidence.get("MessageDirection"),
-                "message_id": evidence.get("MessageId"),
-                "owning_tenant_id": evidence.get("OwningTenantId"),
-                "parent_message_id": evidence.get("ParentMessageId"),
-                "received": evidence.get("Received"),
-                "recipients": evidence.get("Recipients"),
-                "sender_from_address": evidence.get("SenderFromAddress"),
-                "sender_ip": evidence.get("SenderIp"),
-                "source_add_name": evidence.get("SourceAddName"),
-                "source_id": evidence.get("SourceId"),
-                "subject": evidence.get("Subject"),
-                "suspicious_recipients": evidence.get("SuspiciousRecipients"),
-                "thread_id": evidence.get("ThreadId"),
-                "thread_type": evidence.get("ThreadType"),
+                "group_id": evidence.get("groupId"),
+                "is_external": evidence.get("isExternal"),
+                "is_owned": evidence.get("isOwned"),
+                "last_modified": evidence.get("lastModified"),
+                "message_direction": evidence.get("messageDirection"),
+                "message_id": evidence.get("messageId"),
+                "owning_tenant_id": evidence.get("owningTenantId"),
+                "parent_message_id": evidence.get("parentMessageId"),
+                "received": evidence.get("received"),
+                "recipients": evidence.get("recipients"),
+                "sender_from_address": evidence.get("senderFromAddress"),
+                "sender_ip": evidence.get("senderIp"),
+                "source_add_name": evidence.get("sourceAddName"),
+                "source_id": evidence.get("sourceId"),
+                "subject": evidence.get("subject"),
+                "suspicious_recipients": evidence.get("suspiciousRecipients"),
+                "thread_id": evidence.get("threadId"),
+                "thread_type": evidence.get("threadType"),
                 "urls": [
                     {
-                        "full": url.get("Url"),
+                        "full": url.get("url"),
                     }
-                    for url in evidence.get("Urls", [])
+                    for url in evidence.get("urls", [])
                 ],
             },
         }
@@ -722,22 +725,22 @@ class XDRAlertEvidence:
         """Convert URL evidence to howler evidence format."""
         return {
             "url": {
-                "full": evidence.get("Url"),
+                "full": evidence.get("url"),
             },
         }
 
     @staticmethod
     def user_evidence(evidence: dict[str, Any]) -> dict[str, Any]:
         """Convert user evidence to howler evidence format."""
-        user = evidence.get("UserAccount", {})
+        user = evidence.get("userAccount", {})
         if not user:
             user = {}
         return {
             "user": {
-                "name": user.get("AccountName"),
-                "full_name": user.get("UserPrincipalName"),
-                "id": user.get("AzureAdUserId"),
-                "domain": user.get("DomainName"),
+                "name": user.get("accountName"),
+                "full_name": user.get("userPrincipalName"),
+                "id": user.get("azureAdUserId"),
+                "domain": user.get("domainName"),
             },
         }
 

sentinel/routes/ingest.py

@@ -3,7 +3,7 @@ import re
 from typing import Any
 
 from flask import request
-from howler.api import bad_request, created, make_subapi_blueprint, unauthorized
+from howler.api import bad_request, created, make_subapi_blueprint, ok, unauthorized
 from howler.common.exceptions import HowlerException
 from howler.common.loader import datastore
 from howler.common.logging import get_logger
@@ -49,7 +49,7 @@ def ingest_xdr_incident(**kwargs) -> tuple[dict[str, Any], int]:  # noqa C901
         "hit_count": 1
     }
     """
-    # API Key authentication
+    # TODO this endpoint need to be refactored to make it more readable and maintainable
     apikey = request.headers.get("Authorization", "Basic ", type=str).split(" ")[1]
 
     if not apikey or apikey != SECRET:
@@ -57,7 +57,6 @@ def ingest_xdr_incident(**kwargs) -> tuple[dict[str, Any], int]:  # noqa C901
 
     logger.info("Received authorization header with value %s", re.sub(r"^(.{3}).+(.{3})$", r"\1...\2", apikey))
 
-    # Validate JSON payload
     xdr_incident = request.json
     if not xdr_incident:
         return bad_request(err="No JSON data provided in request body")
@@ -65,7 +64,6 @@ def ingest_xdr_incident(**kwargs) -> tuple[dict[str, Any], int]:  # noqa C901
     logger.info("XDR Incident received")
 
     try:
-        # Configure tenant mapping for both mappers
         tenant_mapping = {"020cd98f-1002-45b7-90ff-69fc68bdd027": "Acme Corporation"}
 
         incident_mapper = SentinelIncident(tid_mapping=tenant_mapping)
@@ -74,6 +72,35 @@ def ingest_xdr_incident(**kwargs) -> tuple[dict[str, Any], int]:  # noqa C901
         if bundle_hit is None:
             return bad_request(err="Failed to map XDR incident to Howler bundle format")
 
+        sentinel_id = xdr_incident.get("id")
+        if sentinel_id:
+            existing_bundles = datastore().hit.search(f"sentinel.id:{sentinel_id}", as_obj=True)["items"]
+            if existing_bundles:
+                existing_bundle = existing_bundles[0]
+                new_status = xdr_incident.get("status")
+                if new_status:
+                    existing_bundle.howler.status = incident_mapper.map_sentinel_status_to_howler(new_status)
+                    datastore().hit.save(existing_bundle.howler.id, existing_bundle)
+                for child_id in getattr(existing_bundle.howler, "hits", []):
+                    child_hit = datastore().hit.get(child_id, as_obj=True)
+                    if child_hit:
+                        child_hit.howler.status = incident_mapper.map_sentinel_status_to_howler(new_status)
+                        datastore().hit.save(child_id, child_hit)
+                datastore().hit.commit()
+                logger.info("Updated status for existing bundle %s and its child hits", existing_bundle.howler.id)
+                return ok(
+                    {
+                        "success": True,
+                        "bundle_hit_id": existing_bundle.howler.id,
+                        "bundle_id": existing_bundle.sentinel.id if hasattr(existing_bundle, "sentinel") else None,
+                        "individual_hit_ids": getattr(existing_bundle.howler, "hits", []),
+                        "total_hits_updated": 1 + len(getattr(existing_bundle.howler, "hits", [])),
+                        "bundle_size": len(getattr(existing_bundle.howler, "hits", [])),
+                        "organization": getattr(existing_bundle, "organization", {}).get("name", ""),
+                        "updated": True,
+                    }
+                )
+
         logger.info("Successfully mapped XDR incident to bundle")
 
         alerts = xdr_incident.get("alerts", [])
@@ -116,8 +143,9 @@ def ingest_xdr_incident(**kwargs) -> tuple[dict[str, Any], int]:  # noqa C901
                     bundle_odm.howler.hits.append(hit_id)
 
             if len(bundle_odm.howler.hits) < 1:
-                logger.error("No valid child hits were created from the XDR incident alerts")
-                return bad_request(err="No valid child hits were created from the XDR incident alerts.")
+                # TODO figure out how to handle incidens without alerts
+                logger.info("No valid child hits were created from the XDR incident alerts")
+                return ok("Incident contains no valid alerts to create hits from")
 
             bundle_odm.howler.bundle_size = len(bundle_odm.howler.hits)
 
@@ -151,7 +179,7 @@ def ingest_xdr_incident(**kwargs) -> tuple[dict[str, Any], int]:  # noqa C901
                 "bundle_hit_id": bundle_odm.howler.id,
                 "bundle_id": bundle_hit["howler"].get("xdr.incident.id"),
                 "individual_hit_ids": child_hit_ids,
-                "total_hits_created": len(child_hit_ids) + 1,  # +1 for the bundle itself
+                "total_hits_created": len(child_hit_ids) + 1,
                 "bundle_size": len(child_hit_ids),
                 "organization": bundle_hit["organization"]["name"],
             }

howler_sentinel_plugin-0.2.0.dev104.dist-info/RECORD

@@ -1,17 +0,0 @@
-sentinel/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-sentinel/actions/azure_emit_hash.py,sha256=MeprMe58pac2ntnDanadsPNjXKmIEBSPchT55XMGFWs,3557
-sentinel/actions/send_to_sentinel.py,sha256=s07DTPSVTSC4JwmUQe2q6W6MabfHtE43dmRj3nuE7EM,4021
-sentinel/actions/update_defender_xdr_alert.py,sha256=gXuVZfr7Ou0Lc6BuECmo18E8hfJPhUlM1VMKVCkofk4,6753
-sentinel/mapping/sentinel_incident.py,sha256=U7fIh8N4Jdr1A4z1E0jPRP28Ll0Cq7u9Q6292AnyRDI,9548
-sentinel/mapping/xdr_alert.py,sha256=UPoqdZsjUXmJz0dCf_qMlh9Jr0D2HcSNOFvbg8lE4wY,18250
-sentinel/mapping/xdr_alert_evidence.py,sha256=q622G4eZwFR3TCj418ZCpE83DGVicrWIQZo8Gkj_3FM,31323
-sentinel/odm/hit.py,sha256=hAuO2ONMK3Ml8Xu6E7tHrmZ7M6HG5tT38RD9ZxwY254,666
-sentinel/odm/models/sentinel.py,sha256=XT3XdT92uoCV5vmY9dT1jmcxRyuu9vp1gE8AwZdKBIc,337
-sentinel/routes/__init__.py,sha256=JYmKRwIfEsiPos1XuMQ2mlGDbxk6TN_cVEM0K_RNze4,130
-sentinel/routes/ingest.py,sha256=_9OdOw_9nBJseKIBnmHDLjnqZ_bDdM4wfLpLrek4-ak,7018
-sentinel/utils/tenant_utils.py,sha256=nGOCbLzUx9OyATLAZ5UbW0WNao_1ioW4wL-htn2ltKU,1324
-howler_sentinel_plugin-0.2.0.dev104.dist-info/LICENSE,sha256=Wg2luVnxEkP2NSn11nh1US6W_nFFbICBAVTG9iG3t5M,1091
-howler_sentinel_plugin-0.2.0.dev104.dist-info/METADATA,sha256=ZLe75ogUfw2jpQnn5HFe-im3p0YJpzrg7_p7QjhinAE,749
-howler_sentinel_plugin-0.2.0.dev104.dist-info/WHEEL,sha256=b4K_helf-jlQoXBBETfwnf4B04YC67LOev0jo4fX5m8,88
-howler_sentinel_plugin-0.2.0.dev104.dist-info/entry_points.txt,sha256=4IJyMY0V49s3Wp659ngN_7U8g66-czeKxI-_dNAFP5g,60
-howler_sentinel_plugin-0.2.0.dev104.dist-info/RECORD,,