rosetta-ce 1.2.8__py3-none-any.whl → 1.3.0__py3-none-any.whl

rosetta/rfaker.py

@@ -545,7 +545,9 @@ class Events:
         return json_messages
 
     @classmethod
-    def incidents(cls, count, fields: Optional[str] = None, observables: Optional[Observables] = None) -> List[dict]:
+    def incidents(cls, count, fields: Optional[str] = None, timestamp: Optional[datetime] = None,
+                  vendor: Optional[str] = None, product: Optional[str] = None, version: Optional[str] = None,
+                  observables: Optional[Observables] = None) -> List[dict]:
         """
         Generates a list of fake incident data.
 
@@ -554,6 +556,10 @@ class Events:
             fields (str, optional): A comma-separated list of incident fields to include in the output. If None,
                 all fields will be included. Valid options are: 'id', 'duration', 'type', 'analyst', 'severity',
                 'description', 'events'.
+            vendor: Optional. The vendor.
+            product: Optional. The product.
+            version: Optional. The version.
+            timestamp: Optional. The starting timestamp for the syslog messages. If not provided, a random time during
             observables: An observables object. If not provided, random objservable will be generated and used.
 
         Returns:
@@ -586,7 +592,6 @@ class Events:
         analysts = observables.analysts if observables and observables.analysts \
             else [faker.unique.first_name() for _ in range(10)]
         analyst_incident_map = {}
-
         for analyst in analysts:
             mapped_incident_type = incident_types.pop(0)
             analyst_incident_map[analyst] = mapped_incident_type
@@ -626,11 +631,13 @@ class Events:
                     incident['description'] = incident_description
                 if 'events' in field_list:
                     incident['events'] = [
-                        {"event": cls.syslog(count=1, observables=observables)[0]},
-                        {"event": cls.cef(count=1, observables=observables)[0]},
-                        {"event": cls.leef(count=1, observables=observables)[0]},
-                        {"event": cls.winevent(count=1, observables=observables)[0]},
-                        {"event": cls.json(count=1, observables=observables)[0]}
+                        {"event": cls.syslog(count=1, timestamp=timestamp, observables=observables)[0]},
+                        {"event": cls.cef(count=1, timestamp=timestamp, vendor=vendor, product=product,
+                                          version=version, observables=observables)[0]},
+                        {"event": cls.leef(count=1, timestamp=timestamp, vendor=vendor, product=product,
+                                           version=version, observables=observables)[0]},
+                        {"event": cls.winevent(count=1, timestamp=timestamp, observables=observables)[0]},
+                        {"event": cls.json(count=1, timestamp=timestamp, observables=observables)[0]}
                     ]
             else:
                 incident = {

{rosetta_ce-1.2.8.dist-info → rosetta_ce-1.3.0.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: rosetta-ce
-Version: 1.2.8
+Version: 1.3.0
 Summary: Rosetta is a Python package that can be used to fake security logs and alerts for testing different detection and response use cases.
 Home-page: https://github.com/ayman-m/rosetta
 Author: Ayman Mahmoud

{rosetta_ce-1.2.8.dist-info → rosetta_ce-1.3.0.dist-info}/RECORD

@@ -1,13 +1,13 @@
 rosetta/__init__.py,sha256=9rqZF7bpDMRN5H-rjNRUfzQAOIqyc21hTTZfYufTy04,92
 rosetta/rconverter.py,sha256=oPdWMtO6_aeQC8PqCl4nHKEpVb1kaBACSaNXsz-o00Q,3008
-rosetta/rfaker.py,sha256=ltbpB5rQIYHKhtQmidy-ZCW0DE--a9MdN63WI9JNo7c,32828
+rosetta/rfaker.py,sha256=nYo1YF0sOWkWxFa7unBpjLpqO-nBvcsp8w6HYOPW-6k,33530
 rosetta/rsender.py,sha256=jWbyOXsh2t2TV3c0G_ZauyEdmeLa9FoZ7S9TZ733sSA,7785
 rosetta/constants/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 rosetta/constants/sensors.py,sha256=ZxPWFrNqDFKRVn9ai-5vtvIiU4-3FAXQIRj7gFoBRPk,1936
 rosetta/constants/sources.py,sha256=b3ynlKGw1gw7VBA4yCYkJ7aq4vVPfypqA8W_kuAZaBA,1658
 rosetta/constants/systems.py,sha256=WHOD21CaBgVm3IiF1m-RY2pFRNRaGMZ18pIf0q6ekOI,6697
-rosetta_ce-1.2.8.dist-info/LICENSE,sha256=jF5fCbmI1A-yyvPAEeQ5VHM094tRLlWsMyun-UlX-pQ,1070
-rosetta_ce-1.2.8.dist-info/METADATA,sha256=ElNIjlRDtTB0c3gGWsbI__gHGkXnCGGKPktZTZYOAxE,11321
-rosetta_ce-1.2.8.dist-info/WHEEL,sha256=2wepM1nk4DS4eFpYrW1TTqPcoGNfHhhO_i5m4cOimbo,92
-rosetta_ce-1.2.8.dist-info/top_level.txt,sha256=HLxDc6BJxHZDzVIlOwpCGH0DqIf65OhZcHniRDaUUZc,8
-rosetta_ce-1.2.8.dist-info/RECORD,,
+rosetta_ce-1.3.0.dist-info/LICENSE,sha256=jF5fCbmI1A-yyvPAEeQ5VHM094tRLlWsMyun-UlX-pQ,1070
+rosetta_ce-1.3.0.dist-info/METADATA,sha256=ciV5RVnMB2uUwu1I3BeMHmnnAUMFajiIHGW1HhMC5G8,11321
+rosetta_ce-1.3.0.dist-info/WHEEL,sha256=2wepM1nk4DS4eFpYrW1TTqPcoGNfHhhO_i5m4cOimbo,92
+rosetta_ce-1.3.0.dist-info/top_level.txt,sha256=HLxDc6BJxHZDzVIlOwpCGH0DqIf65OhZcHniRDaUUZc,8
+rosetta_ce-1.3.0.dist-info/RECORD,,