prelude-cli-beta 1405__py3-none-any.whl → 1407__py3-none-any.whl

prelude_sdk_beta/controllers/partner_controller.py

@@ -1,166 +0,0 @@
-from datetime import datetime, timezone
-
-from prelude_sdk.controllers.http_controller import HttpController
-from prelude_sdk.models.account import verify_credentials
-from prelude_sdk.models.codes import Control
-
-
-class PartnerController(HttpController):
-
-    def __init__(self, account):
-        super().__init__(account)
-
-    @verify_credentials
-    def attach(
-        self,
-        partner: Control,
-        api: str,
-        user: str,
-        secret: str,
-        name: str | None = None,
-        instance_id: str | None = None,
-    ):
-        """Attach a partner to your account"""
-        params = dict()
-        if name:
-            params["name"] = name
-        if api:
-            params["api"] = api
-        if user:
-            params["user"] = user
-        if secret:
-            params["secret"] = secret
-        extra = f"/{instance_id}" if instance_id else ""
-        res = self.post(
-            f"{self.account.hq}/partner/{partner.name}{extra}",
-            headers=self.account.headers,
-            json=params,
-            timeout=10,
-        )
-        return res.json()
-
-    @verify_credentials
-    def detach(self, partner: Control, instance_id: str):
-        """Detach a partner from your Detect account"""
-        res = self.delete(
-            f"{self.account.hq}/partner/{partner.name}/{instance_id}",
-            headers=self.account.headers,
-            timeout=10,
-        )
-        return res.json()
-
-    @verify_credentials
-    def block(self, partner: Control, test_id: str):
-        """Report to a partner to block a test"""
-        params = dict(test_id=test_id)
-        res = self.post(
-            f"{self.account.hq}/partner/block/{partner.name}",
-            headers=self.account.headers,
-            json=params,
-            timeout=30,
-        )
-        return res.json()
-
-    @verify_credentials
-    def endpoints(
-        self,
-        partner: Control,
-        platform: str,
-        hostname: str = "",
-        offset: int = 0,
-        count: int = 100,
-    ):
-        """Get a list of endpoints from a partner"""
-        params = dict(platform=platform, hostname=hostname, offset=offset, count=count)
-        res = self.get(
-            f"{self.account.hq}/partner/endpoints/{partner.name}",
-            headers=self.account.headers,
-            params=params,
-            timeout=30,
-        )
-        return res.json()
-
-    @verify_credentials
-    def deploy(self, partner: Control, host_ids: list):
-        """Deploy probes on all specified partner endpoints"""
-        params = dict(host_ids=host_ids)
-        res = self.post(
-            f"{self.account.hq}/partner/deploy/{partner.name}",
-            headers=self.account.headers,
-            json=params,
-            timeout=30,
-        )
-        return res.json()
-
-    @verify_credentials
-    def list_reports(self, partner: Control, test_id: str | None):
-        """Get reports to a partner for a test"""
-        params = dict(test_id=test_id) if test_id else dict()
-        res = self.get(
-            f"{self.account.hq}/partner/reports/{partner.name}",
-            headers=self.account.headers,
-            json=params,
-            timeout=30,
-        )
-        return res.json()
-
-    @verify_credentials
-    def ioa_stats(self, test_id: str | None = None):
-        """Get IOA stats"""
-        params = dict(test_id=test_id) if test_id else dict()
-        res = self.get(
-            f"{self.account.hq}/partner/ioa_stats",
-            headers=self.account.headers,
-            json=params,
-            timeout=30,
-        )
-        return res.json()
-
-    @verify_credentials
-    def observed_detected(self, test_id: str | None = None, hours: int | None = None):
-        """Get observed_detected stats"""
-        params = dict()
-        if test_id:
-            params["test_id"] = test_id
-        if hours:
-            params["start_epoch_ms"] = (
-                datetime.now(timezone.utc).timestamp() - hours * 60 * 60
-            ) * 1000
-
-        res = self.get(
-            f"{self.account.hq}/partner/observed_detected",
-            headers=self.account.headers,
-            json=params,
-            timeout=30,
-        )
-        return res.json()
-
-    @verify_credentials
-    def list_advisories(
-        self, partner: Control, start: str = None, limit: int = None, offset: int = None
-    ):
-        """Get advisory reports provided by a partner"""
-        params = dict()
-        if start:
-            params["start"] = start
-        if limit:
-            params["limit"] = limit
-        if offset:
-            params["offset"] = offset
-        res = self.get(
-            f"{self.account.hq}/partner/advisories/{partner.name}",
-            headers=self.account.headers,
-            params=params,
-            timeout=30,
-        )
-        return res.json()
-
-    @verify_credentials
-    def partner_groups(self, partner: Control, instance_id: str):
-        """Get a list of partner groups"""
-        res = self.get(
-            f"{self.account.hq}/partner/groups/{partner.name}/{instance_id}",
-            headers=self.account.headers,
-            timeout=30,
-        )
-        return res.json()

prelude_sdk_beta/controllers/probe_controller.py

@@ -1,14 +0,0 @@
-from prelude_sdk.controllers.http_controller import HttpController
-
-
-class ProbeController(HttpController):
-
-    def __init__(self, account):
-        super().__init__(account)
-
-    def download(self, name: str, dos: str):
-        """Download a probe executable"""
-        res = self.get(
-            f"{self.account.hq}/download/{name}", headers=dict(dos=dos), timeout=10
-        )
-        return res.text

prelude_sdk_beta/controllers/scm_controller.py

@@ -1,424 +0,0 @@
-from prelude_sdk.controllers.http_controller import HttpController
-from prelude_sdk.models.account import verify_credentials
-from prelude_sdk.models.codes import Control, ControlCategory, PartnerEvents, RunCode
-
-
-class ScmController(HttpController):
-    default = -1
-
-    def __init__(self, account):
-        super().__init__(account)
-
-    @verify_credentials
-    def endpoints(self, filter: str = None, orderby: str = None, top: int = None):
-        """List endpoints with SCM analysis"""
-        params = {"$filter": filter, "$orderby": orderby, "$top": top}
-        res = self.get(
-            f"{self.account.hq}/scm/endpoints",
-            headers=self.account.headers,
-            params=params,
-            timeout=30,
-        )
-        return res.json()
-
-    @verify_credentials
-    def inboxes(self, filter: str = None, orderby: str = None, top: int = None):
-        """List inboxes with SCM analysis"""
-        params = {"$filter": filter, "$orderby": orderby, "$top": top}
-        res = self.get(
-            f"{self.account.hq}/scm/inboxes",
-            headers=self.account.headers,
-            params=params,
-            timeout=30,
-        )
-        return res.json()
-
-    @verify_credentials
-    def users(self, filter: str = None, orderby: str = None, top: int = None):
-        """List users with SCM analysis"""
-        params = {"$filter": filter, "$orderby": orderby, "$top": top}
-        res = self.get(
-            f"{self.account.hq}/scm/users",
-            headers=self.account.headers,
-            params=params,
-            timeout=30,
-        )
-        return res.json()
-
-    @verify_credentials
-    def technique_summary(self, techniques: str):
-        """Get policy evaluation summary by technique"""
-        res = self.get(
-            f"{self.account.hq}/scm/technique_summary",
-            params=dict(techniques=techniques),
-            headers=self.account.headers,
-            timeout=30,
-        )
-        return res.json()
-
-    @verify_credentials
-    def evaluation_summary(
-        self,
-        endpoint_filter: str = None,
-        inbox_filter: str = None,
-        user_filter: str = None,
-        techniques: str = None,
-    ):
-        """Get policy evaluation summary"""
-        params = dict(
-            endpoints_filter=endpoint_filter,
-            inboxes_filter=inbox_filter,
-            users_filter=user_filter,
-        )
-        if techniques:
-            params["techniques"] = techniques
-        res = self.get(
-            f"{self.account.hq}/scm/evaluation_summary",
-            params=params,
-            headers=self.account.headers,
-            timeout=30,
-        )
-        return res.json()
-
-    @verify_credentials
-    def evaluation(
-        self,
-        partner: Control,
-        instance_id: str,
-        filter: str = None,
-        techniques: str = None,
-    ):
-        """Get policy evaluations for given partner"""
-        params = {"$filter": filter}
-        if techniques:
-            params["techniques"] = techniques
-        res = self.get(
-            f"{self.account.hq}/scm/evaluations/{partner.name}/{instance_id}",
-            params=params,
-            headers=self.account.headers,
-            timeout=30,
-        )
-        return res.json()
-
-    @verify_credentials
-    def update_evaluation(self, partner: Control, instance_id: str):
-        """Update policy evaluations for given partner"""
-        res = self.post(
-            f"{self.account.hq}/scm/evaluations/{partner.name}/{instance_id}",
-            headers=self.account.headers,
-            timeout=60,
-        )
-        return res.json()
-
-    @verify_credentials
-    def list_partner_groups(self, filter: str = None, orderby: str = None):
-        """List groups"""
-        params = {"$filter": filter, "$orderby": orderby}
-        res = self.get(
-            f"{self.account.hq}/scm/groups",
-            headers=self.account.headers,
-            params=params,
-            timeout=10,
-        )
-        return res.json()
-
-    @verify_credentials
-    def update_partner_groups(
-        self, partner: Control, instance_id: str, group_ids: list[str]
-    ):
-        """Update groups"""
-        body = dict(group_ids=group_ids)
-        res = self.post(
-            f"{self.account.hq}/scm/groups/{partner.name}/{instance_id}",
-            headers=self.account.headers,
-            json=body,
-            timeout=10,
-        )
-        return res.json()
-
-    @verify_credentials
-    def list_object_exceptions(self):
-        """List object exceptions"""
-        res = self.get(
-            f"{self.account.hq}/scm/exceptions/objects",
-            headers=self.account.headers,
-            timeout=10,
-        )
-        return res.json()
-
-    @verify_credentials
-    def create_object_exception(
-        self, category: ControlCategory, filter, name=None, expires: str = None
-    ):
-        """Create an object exception"""
-        body = dict(category=category.name, filter=filter)
-        if name:
-            body["name"] = name
-        if expires:
-            body["expires"] = expires
-        res = self.post(
-            f"{self.account.hq}/scm/exceptions/objects",
-            json=body,
-            headers=self.account.headers,
-            timeout=10,
-        )
-        return res.json()
-
-    @verify_credentials
-    def update_object_exception(
-        self, exception_id, expires=default, filter=None, name=None
-    ):
-        """Update an object exception"""
-        body = dict()
-        if expires != self.default:
-            body["expires"] = expires
-        if filter:
-            body["filter"] = filter
-        if name:
-            body["name"] = name
-        res = self.post(
-            f"{self.account.hq}/scm/exceptions/objects/{exception_id}",
-            json=body,
-            headers=self.account.headers,
-            timeout=10,
-        )
-        return res.json()
-
-    @verify_credentials
-    def delete_object_exception(self, exception_id):
-        """Delete an object exception"""
-        res = self.delete(
-            f"{self.account.hq}/scm/exceptions/objects/{exception_id}",
-            headers=self.account.headers,
-            timeout=10,
-        )
-        return res.json()
-
-    @verify_credentials
-    def list_policy_exceptions(self):
-        """List policy exceptions"""
-        res = self.get(
-            f"{self.account.hq}/scm/exceptions/policies",
-            headers=self.account.headers,
-            timeout=10,
-        )
-        return res.json()
-
-    @verify_credentials
-    def put_policy_exceptions(
-        self, partner: Control, expires, instance_id: str, policy_id, setting_names
-    ):
-        """Put policy exceptions"""
-        body = dict(
-            control=partner.name,
-            expires=expires,
-            instance_id=instance_id,
-            policy_id=policy_id,
-            setting_names=setting_names,
-        )
-        res = self.put(
-            f"{self.account.hq}/scm/exceptions/policies",
-            json=body,
-            headers=self.account.headers,
-            timeout=10,
-        )
-        return res.json()
-
-    @verify_credentials
-    def list_views(self):
-        """List views"""
-        res = self.get(
-            f"{self.account.hq}/scm/views",
-            headers=self.account.headers,
-            timeout=10,
-        )
-        return res.json()
-
-    @verify_credentials
-    def create_view(self, category: ControlCategory, filter: str, name: str):
-        """Create a view"""
-        body = dict(category=category.name, filter=filter, name=name)
-        res = self.post(
-            f"{self.account.hq}/scm/views",
-            json=body,
-            headers=self.account.headers,
-            timeout=10,
-        )
-        return res.json()
-
-    @verify_credentials
-    def update_view(
-        self, view_id, category: ControlCategory = None, filter=None, name=None
-    ):
-        """Update a view"""
-        body = dict()
-        if category:
-            body["category"] = category.name
-        if filter:
-            body["filter"] = filter
-        if name:
-            body["name"] = name
-        res = self.post(
-            f"{self.account.hq}/scm/views/{view_id}",
-            json=body,
-            headers=self.account.headers,
-            timeout=10,
-        )
-        return res.json()
-
-    @verify_credentials
-    def delete_view(self, view_id):
-        """Delete a view"""
-        res = self.delete(
-            f"{self.account.hq}/scm/views/{view_id}",
-            headers=self.account.headers,
-            timeout=10,
-        )
-        return res.json()
-
-    @verify_credentials
-    def create_threat(
-        self,
-        name,
-        description=None,
-        id=None,
-        generated=None,
-        published=None,
-        source=None,
-        source_id=None,
-        techniques=None,
-    ):
-        """Create an scm threat"""
-        body = dict(name=name)
-        if description:
-            body["description"] = description
-        if id:
-            body["id"] = id
-        if generated:
-            body["generated"] = generated
-        if published:
-            body["published"] = published
-        if source:
-            body["source"] = source
-        if source_id:
-            body["source_id"] = source_id
-        if techniques:
-            body["techniques"] = techniques
-
-        res = self.post(
-            f"{self.account.hq}/scm/threats",
-            json=body,
-            headers=self.account.headers,
-            timeout=10,
-        )
-        return res.json()
-
-    @verify_credentials
-    def delete_threat(self, id):
-        """Delete an existing scm threat"""
-        res = self.delete(
-            f"{self.account.hq}/scm/threats/{id}",
-            headers=self.account.headers,
-            timeout=10,
-        )
-        return res.json()
-
-    @verify_credentials
-    def get_threat(self, id):
-        """Get specific scm threat"""
-        res = self.get(
-            f"{self.account.hq}/scm/threats/{id}",
-            headers=self.account.headers,
-            timeout=10,
-        )
-        return res.json()
-
-    @verify_credentials
-    def list_threats(self):
-        """List all scm threats"""
-        res = self.get(
-            f"{self.account.hq}/scm/threats", headers=self.account.headers, timeout=10
-        )
-        return res.json()
-
-    @verify_credentials
-    def parse_threat_intel(self, file: str):
-        with open(file, "rb") as f:
-            body = f.read()
-        res = self.post(
-            f"{self.account.hq}/scm/threat-intel",
-            data=body,
-            headers=self.account.headers | {"Content-Type": "application/pdf"},
-            timeout=30,
-        )
-        return res.json()
-
-    @verify_credentials
-    def parse_from_partner_advisory(self, partner: Control, advisory_id: str):
-        params = dict(advisory_id=advisory_id)
-        res = self.post(
-            f"{self.account.hq}/scm/partner-advisories/{partner.name}",
-            headers=self.account.headers,
-            json=params,
-            timeout=30,
-        )
-        return res.json()
-
-    @verify_credentials
-    def list_notifications(self):
-        res = self.get(
-            f"{self.account.hq}/scm/notifications",
-            headers=self.account.headers,
-            timeout=10,
-        )
-        return res.json()
-
-    @verify_credentials
-    def delete_notification(self, notification_id: str):
-        res = self.delete(
-            f"{self.account.hq}/scm/notifications/{notification_id}",
-            headers=self.account.headers,
-            timeout=10,
-        )
-        return res.json()
-
-    @verify_credentials
-    def upsert_notification(
-        self,
-        control_category: ControlCategory,
-        event: PartnerEvents,
-        run_code: RunCode,
-        scheduled_hour: int,
-        emails: list[str] = None,
-        filter: str = None,
-        id: str = None,
-        message: str = "",
-        slack_urls: list[str] = None,
-        suppress_empty: bool = True,
-        teams_urls: list[str] = None,
-        title: str = "SCM Notification",
-    ):
-        body = dict(
-            control_category=control_category.name,
-            event=event.name,
-            run_code=run_code.name,
-            scheduled_hour=scheduled_hour,
-            suppress_empty=suppress_empty,
-        )
-        if id:
-            body["id"] = id
-        if filter:
-            body["filter"] = filter
-        if emails:
-            body["email"] = dict(emails=emails, message=message, subject=title)
-        if slack_urls:
-            body["slack"] = dict(hook_urls=slack_urls, message=message)
-        if teams_urls:
-            body["teams"] = dict(hook_urls=teams_urls, message=message)
-        res = self.put(
-            f"{self.account.hq}/scm/notifications",
-            json=body,
-            headers=self.account.headers,
-            timeout=10,
-        )
-        return res.json()