rosetta-ce 1.2.9__py3-none-any.whl → 1.3.1__py3-none-any.whl

rosetta/rfaker.py

@@ -546,6 +546,7 @@ class Events:
 
     @classmethod
     def incidents(cls, count, fields: Optional[str] = None, timestamp: Optional[datetime] = None,
+                  vendor: Optional[str] = None, product: Optional[str] = None, version: Optional[str] = None,
                   observables: Optional[Observables] = None) -> List[dict]:
         """
         Generates a list of fake incident data.
@@ -555,6 +556,9 @@ class Events:
             fields (str, optional): A comma-separated list of incident fields to include in the output. If None,
                 all fields will be included. Valid options are: 'id', 'duration', 'type', 'analyst', 'severity',
                 'description', 'events'.
+            vendor: Optional. The vendor.
+            product: Optional. The product.
+            version: Optional. The version.
             timestamp: Optional. The starting timestamp for the syslog messages. If not provided, a random time during
             observables: An observables object. If not provided, random objservable will be generated and used.
 
@@ -628,8 +632,10 @@ class Events:
                 if 'events' in field_list:
                     incident['events'] = [
                         {"event": cls.syslog(count=1, timestamp=timestamp, observables=observables)[0]},
-                        {"event": cls.cef(count=1, timestamp=timestamp, observables=observables)[0]},
-                        {"event": cls.leef(count=1, timestamp=timestamp, observables=observables)[0]},
+                        {"event": cls.cef(count=1, timestamp=timestamp, vendor=vendor, product=product,
+                                          version=version, observables=observables)[0]},
+                        {"event": cls.leef(count=1, timestamp=timestamp, vendor=vendor, product=product,
+                                           version=version, observables=observables)[0]},
                         {"event": cls.winevent(count=1, timestamp=timestamp, observables=observables)[0]},
                         {"event": cls.json(count=1, timestamp=timestamp, observables=observables)[0]}
                     ]

rosetta/rsender.py

@@ -57,7 +57,8 @@ class Sender:
 
     def __init__(self, data_type: str, destination: str,
                  worker_name: Optional[str] = 'worker_'+str(datetime.now()), count: Optional[int] = 1,
-                 interval: Optional[int] = 1, observables: Optional[Observables] = None, fields: Optional[str] = None,
+                 interval: Optional[int] = 1, vendor: Optional[str] = None, product: Optional[str] = None,
+                 version: Optional[str] = None, observables: Optional[Observables] = None, fields: Optional[str] = None,
                  verify_ssl: Optional[bool] = None, datetime_obj: Optional[datetime] = None):
         """
         Constructor for DataSenderWorker class.
@@ -73,6 +74,9 @@ class Sender:
         :param worker_name: str, name of the worker.
         :param count: int, number of times to send the data.
         :param interval: int, time interval between two consecutive data sends.
+        :param vendor: Optional. The vendor.
+        :param product: Optional. The product.
+        :param version: Optional. The version.
         :param observables: Observables, list of observables.
         :param fields: str, comma-separated list of fields to include in incident data.
         :param verify_ssl: bool, handling ssl verification errors.
@@ -84,6 +88,9 @@ class Sender:
         self.data_type = data_type
         self.count = count
         self.interval = interval
+        self.vendor = vendor
+        self.product = product
+        self.version = version
         self.destination = destination
         self.created_at = datetime.now()
         self.status = "Stopped"
@@ -133,9 +140,13 @@ class Sender:
                     if self.data_type == "SYSLOG":
                         fake_message = Events.syslog(count=1, timestamp=self.datetime_obj, observables=self.observables)
                     if self.data_type == "CEF":
-                        fake_message = Events.cef(count=1, timestamp=self.datetime_obj, observables=self.observables)
+                        fake_message = Events.cef(count=1, timestamp=self.datetime_obj, vendor=self.vendor,
+                                                  product=self.product, version=self.version,
+                                                  observables=self.observables)
                     if self.data_type == "LEEF":
-                        fake_message = Events.leef(count=1, timestamp=self.datetime_obj, observables=self.observables)
+                        fake_message = Events.leef(count=1, timestamp=self.datetime_obj, vendor=self.vendor,
+                                                   product=self.product, version=self.version,
+                                                   observables=self.observables)
                     ip_address = self.destination.split(':')[1]
                     port = self.destination.split(':')[2]
                     if 'tcp' in self.destination:

{rosetta_ce-1.2.9.dist-info → rosetta_ce-1.3.1.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: rosetta-ce
-Version: 1.2.9
+Version: 1.3.1
 Summary: Rosetta is a Python package that can be used to fake security logs and alerts for testing different detection and response use cases.
 Home-page: https://github.com/ayman-m/rosetta
 Author: Ayman Mahmoud

{rosetta_ce-1.2.9.dist-info → rosetta_ce-1.3.1.dist-info}/RECORD

@@ -1,13 +1,13 @@
 rosetta/__init__.py,sha256=9rqZF7bpDMRN5H-rjNRUfzQAOIqyc21hTTZfYufTy04,92
 rosetta/rconverter.py,sha256=oPdWMtO6_aeQC8PqCl4nHKEpVb1kaBACSaNXsz-o00Q,3008
-rosetta/rfaker.py,sha256=FWHnFI50m0LfX4iwEZKfrd_x9cYHugePnUq96x_hVPQ,33107
-rosetta/rsender.py,sha256=jWbyOXsh2t2TV3c0G_ZauyEdmeLa9FoZ7S9TZ733sSA,7785
+rosetta/rfaker.py,sha256=nYo1YF0sOWkWxFa7unBpjLpqO-nBvcsp8w6HYOPW-6k,33530
+rosetta/rsender.py,sha256=t7NrKQctBIMbWAucFpZpKYDcGdvmbBS8cu0kTMTy9LI,8454
 rosetta/constants/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 rosetta/constants/sensors.py,sha256=ZxPWFrNqDFKRVn9ai-5vtvIiU4-3FAXQIRj7gFoBRPk,1936
 rosetta/constants/sources.py,sha256=b3ynlKGw1gw7VBA4yCYkJ7aq4vVPfypqA8W_kuAZaBA,1658
 rosetta/constants/systems.py,sha256=WHOD21CaBgVm3IiF1m-RY2pFRNRaGMZ18pIf0q6ekOI,6697
-rosetta_ce-1.2.9.dist-info/LICENSE,sha256=jF5fCbmI1A-yyvPAEeQ5VHM094tRLlWsMyun-UlX-pQ,1070
-rosetta_ce-1.2.9.dist-info/METADATA,sha256=_b8Ki9_yIw4t9eliJmiMUIAP5RzkCzaV09goe7RHdi4,11321
-rosetta_ce-1.2.9.dist-info/WHEEL,sha256=2wepM1nk4DS4eFpYrW1TTqPcoGNfHhhO_i5m4cOimbo,92
-rosetta_ce-1.2.9.dist-info/top_level.txt,sha256=HLxDc6BJxHZDzVIlOwpCGH0DqIf65OhZcHniRDaUUZc,8
-rosetta_ce-1.2.9.dist-info/RECORD,,
+rosetta_ce-1.3.1.dist-info/LICENSE,sha256=jF5fCbmI1A-yyvPAEeQ5VHM094tRLlWsMyun-UlX-pQ,1070
+rosetta_ce-1.3.1.dist-info/METADATA,sha256=XpfDT9orIRLZhZiVkIGlakVHhx2MA3PK-XmLY6XWt88,11321
+rosetta_ce-1.3.1.dist-info/WHEEL,sha256=2wepM1nk4DS4eFpYrW1TTqPcoGNfHhhO_i5m4cOimbo,92
+rosetta_ce-1.3.1.dist-info/top_level.txt,sha256=HLxDc6BJxHZDzVIlOwpCGH0DqIf65OhZcHniRDaUUZc,8
+rosetta_ce-1.3.1.dist-info/RECORD,,