prelude-sdk-beta 1427__tar.gz → 1430__tar.gz

{prelude_sdk_beta-1427 → prelude_sdk_beta-1430}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: prelude-sdk-beta
-Version: 1427
+Version: 1430
 Summary: For interacting with the Prelude API
 Home-page: https://github.com/preludeorg
 Author: Prelude Research

{prelude_sdk_beta-1427 → prelude_sdk_beta-1430}/prelude_sdk_beta/models/codes.py

@@ -206,6 +206,10 @@ class Control(Enum, metaclass=MissingItem):
                 return k
         return SCMCategory.NONE
 
+    @property
+    def policy_types(self):
+        return [k for k, v in PolicyType.control_mapping().items() if self in v]
+
     @property
     def parent(self):
         match self:
@@ -439,7 +443,9 @@ class PartnerEvents(Enum, metaclass=MissingItem):
             ],
             PartnerEvents.MISSING_ASR_POLICY: [ControlCategory.ASSET_MANAGER],
             PartnerEvents.MISSING_AV_POLICY: [ControlCategory.XDR],
-            PartnerEvents.MISSING_DEVICE_COMPLIANCE_POLICY: [ControlCategory.ASSET_MANAGER],
+            PartnerEvents.MISSING_DEVICE_COMPLIANCE_POLICY: [
+                ControlCategory.ASSET_MANAGER
+            ],
             PartnerEvents.MISSING_DISK_ENCRYPTION: [ControlCategory.ASSET_MANAGER],
             PartnerEvents.MISSING_DISK_ENCRYPTION_POLICY: [
                 ControlCategory.ASSET_MANAGER
@@ -521,6 +527,41 @@ class PolicyType(Enum, metaclass=MissingItem):
     def _missing_(cls, value):
         return PolicyType.INVALID
 
+    @classmethod
+    def control_mapping(cls):
+        return {
+            PolicyType.EDR: ControlCategory.mapping()[ControlCategory.XDR],
+            PolicyType.AV: [Control.DEFENDER],
+            PolicyType.IDENTITY_PASSWORD: ControlCategory.mapping()[
+                ControlCategory.IDENTITY
+            ],
+            PolicyType.EMAIL_ANTIPHISH: ControlCategory.mapping()[
+                ControlCategory.EMAIL
+            ],
+            PolicyType.EMAIL_OUTBOUND: ControlCategory.mapping()[ControlCategory.EMAIL],
+            PolicyType.EMAIL_CONTENT: ControlCategory.mapping()[ControlCategory.EMAIL],
+            PolicyType.EMAIL_MALWARE: ControlCategory.mapping()[ControlCategory.EMAIL],
+            PolicyType.EMAIL_ATTACHMENT: ControlCategory.mapping()[
+                ControlCategory.EMAIL
+            ],
+            PolicyType.EMAIL_LINKS: ControlCategory.mapping()[ControlCategory.EMAIL],
+            PolicyType.EMAIL_DKIM: ControlCategory.mapping()[ControlCategory.EMAIL],
+            PolicyType.DEVICE_COMPLIANCE: [Control.INTUNE],
+            PolicyType.IDENTITY_MFA: ControlCategory.mapping()[
+                ControlCategory.IDENTITY
+            ],
+            PolicyType.HOST_FIREWALL: [Control.INTUNE],
+            PolicyType.NETWORK_FIREWALL: ControlCategory.mapping()[
+                ControlCategory.NETWORK
+            ],
+            PolicyType.INTEL_BELOW_OS: [Control.INTEL_INTUNE],
+            PolicyType.INTEL_OS: [Control.INTEL_INTUNE],
+            PolicyType.INTEL_TDT: [Control.INTEL_INTUNE],
+            PolicyType.INTEL_CHIP: [Control.INTEL_INTUNE],
+            PolicyType.DISK_ENCRYPTION: [Control.INTUNE],
+            PolicyType.ASR: [Control.INTUNE],
+        }
+
 
 class Platform(Enum, metaclass=MissingItem):
     INVALID = 0

{prelude_sdk_beta-1427 → prelude_sdk_beta-1430}/prelude_sdk_beta.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: prelude-sdk-beta
-Version: 1427
+Version: 1430
 Summary: For interacting with the Prelude API
 Home-page: https://github.com/preludeorg
 Author: Prelude Research

{prelude_sdk_beta-1427 → prelude_sdk_beta-1430}/setup.cfg

@@ -1,6 +1,6 @@
 [metadata]
 name = prelude-sdk-beta
-version = 1427
+version = 1430
 author = Prelude Research
 author_email = support@preludesecurity.com
 description = For interacting with the Prelude API

{prelude_sdk_beta-1427 → prelude_sdk_beta-1430}/tests/test_scm.py

@@ -168,6 +168,16 @@ class TestScmPerControl:
                 raise e
 
     def test_evaluation(self, unwrap, control):
+        def _wait_for_policies(control, instance_id, category):
+            timeout = time.time() + 300
+            while time.time() < timeout:
+                evaluation = unwrap(self.scm.evaluation)(self.scm, control, instance_id)
+                evaluation = evaluation[f"{category}_evaluation"]
+                if len(evaluation["policies"]) > 0:
+                    return evaluation
+                time.sleep(5)
+            assert False, "Timed out waiting for policies to show up in evaluation"
+
         instance_id = pytest.controls.get(control.value)
         assert instance_id
         evaluation = unwrap(self.scm.evaluation)(self.scm, control, instance_id)
@@ -178,7 +188,7 @@ class TestScmPerControl:
                 control.control_category == ControlCategory.XDR
                 or control == Control.INTUNE
             ):
-                assert len(evaluation["policies"]) > 0
+                evaluation = _wait_for_policies(control, instance_id, "endpoint")
                 assert {
                     "excepted",
                     "id",
@@ -194,19 +204,14 @@ class TestScmPerControl:
         elif "user_evaluation" in evaluation:
             evaluation = evaluation["user_evaluation"]
             assert {"policies"} == evaluation.keys()
-            assert len(evaluation["policies"]) > 0
-            assert {
-                "excepted",
-                "id",
-                "name",
-                "noncompliant_hostnames",
-                "settings",
-                "user_count",
-            } == evaluation["policies"][0].keys()
+            evaluation = _wait_for_policies(control, instance_id, "user")
+            assert {"excepted", "id", "name", "settings", "user_count"} == evaluation[
+                "policies"
+            ][0].keys()
         elif "inbox_evaluation" in evaluation:
             evaluation = evaluation["inbox_evaluation"]
             assert {"policies"} == evaluation.keys()
-            assert len(evaluation["policies"]) > 0
+            evaluation = _wait_for_policies(control, instance_id, "inbox")
             assert {"excepted", "id", "name", "settings", "inbox_count"} == evaluation[
                 "policies"
             ][0].keys()