synapse 2.177.0__py311-none-any.whl → 2.179.0__py311-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.


This version of synapse might be problematic. Click here for more details.

Files changed (73) hide show
  1. synapse/cortex.py +170 -31
  2. synapse/datamodel.py +47 -1
  3. synapse/exc.py +1 -0
  4. synapse/lib/aha.py +362 -88
  5. synapse/lib/ast.py +26 -22
  6. synapse/lib/base.py +39 -12
  7. synapse/lib/cell.py +315 -119
  8. synapse/lib/config.py +15 -11
  9. synapse/lib/coro.py +27 -0
  10. synapse/lib/drive.py +551 -0
  11. synapse/lib/layer.py +0 -5
  12. synapse/lib/link.py +1 -1
  13. synapse/lib/lmdbslab.py +3 -3
  14. synapse/lib/nexus.py +24 -12
  15. synapse/lib/schemas.py +39 -0
  16. synapse/lib/snap.py +17 -7
  17. synapse/lib/storm.py +3 -1
  18. synapse/lib/stormhttp.py +1 -0
  19. synapse/lib/stormlib/imap.py +6 -2
  20. synapse/lib/stormlib/modelext.py +29 -3
  21. synapse/lib/stormlib/smtp.py +12 -2
  22. synapse/lib/stormlib/stix.py +40 -17
  23. synapse/lib/stormlib/vault.py +2 -2
  24. synapse/lib/stormtypes.py +1 -1
  25. synapse/lib/types.py +9 -0
  26. synapse/lib/version.py +2 -2
  27. synapse/lookup/pe.py +303 -38
  28. synapse/models/dns.py +24 -1
  29. synapse/models/geospace.py +4 -1
  30. synapse/models/infotech.py +26 -1
  31. synapse/telepath.py +32 -17
  32. synapse/tests/files/aha/certs/cas/synapse.crt +28 -0
  33. synapse/tests/files/aha/certs/cas/synapse.key +51 -0
  34. synapse/tests/files/aha/certs/hosts/00.aha.loop.vertex.link.crt +30 -0
  35. synapse/tests/files/aha/certs/hosts/00.aha.loop.vertex.link.key +51 -0
  36. synapse/tests/files/aha/certs/users/root@synapse.crt +29 -0
  37. synapse/tests/files/aha/certs/users/root@synapse.key +51 -0
  38. synapse/tests/files/rstorm/testsvc.py +1 -1
  39. synapse/tests/test_axon.py +1 -1
  40. synapse/tests/test_cortex.py +67 -60
  41. synapse/tests/test_lib_agenda.py +3 -3
  42. synapse/tests/test_lib_aha.py +353 -490
  43. synapse/tests/test_lib_base.py +20 -0
  44. synapse/tests/test_lib_cell.py +273 -22
  45. synapse/tests/test_lib_config.py +4 -3
  46. synapse/tests/test_lib_coro.py +12 -0
  47. synapse/tests/test_lib_nexus.py +8 -0
  48. synapse/tests/test_lib_stormhttp.py +40 -0
  49. synapse/tests/test_lib_stormlib_aha.py +35 -35
  50. synapse/tests/test_lib_stormlib_cell.py +4 -15
  51. synapse/tests/test_lib_stormlib_imap.py +14 -3
  52. synapse/tests/test_lib_stormlib_modelext.py +55 -3
  53. synapse/tests/test_lib_stormlib_smtp.py +51 -0
  54. synapse/tests/test_lib_stormlib_stix.py +15 -0
  55. synapse/tests/test_lib_stormlib_vault.py +11 -1
  56. synapse/tests/test_lib_stormtypes.py +5 -0
  57. synapse/tests/test_lib_types.py +9 -0
  58. synapse/tests/test_model_dns.py +8 -0
  59. synapse/tests/test_model_geospace.py +3 -1
  60. synapse/tests/test_model_infotech.py +47 -0
  61. synapse/tests/test_model_syn.py +11 -0
  62. synapse/tests/test_tools_aha.py +78 -101
  63. synapse/tests/test_utils_stormcov.py +1 -1
  64. synapse/tests/utils.py +86 -120
  65. synapse/tools/aha/clone.py +50 -0
  66. synapse/tools/aha/enroll.py +2 -1
  67. synapse/tools/backup.py +2 -2
  68. synapse/tools/changelog.py +31 -1
  69. {synapse-2.177.0.dist-info → synapse-2.179.0.dist-info}/METADATA +48 -48
  70. {synapse-2.177.0.dist-info → synapse-2.179.0.dist-info}/RECORD +73 -65
  71. {synapse-2.177.0.dist-info → synapse-2.179.0.dist-info}/WHEEL +1 -1
  72. {synapse-2.177.0.dist-info → synapse-2.179.0.dist-info}/LICENSE +0 -0
  73. {synapse-2.177.0.dist-info → synapse-2.179.0.dist-info}/top_level.txt +0 -0
synapse/lookup/pe.py CHANGED
@@ -30,6 +30,9 @@ def getRsrcTypes():
30
30
 
31
31
  # Language identifier constants and strings
32
32
  # https://docs.microsoft.com/en-us/windows/desktop/intl/language-identifier-constants-and-strings#language-identifier-notes
33
+ # https://winprotocoldoc.blob.core.windows.net/productionwindowsarchives/MS-LCID/%5bMS-LCID%5d.pdf
34
+ # https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-lcid/63d3d639-7fd2-4afb-abbe-0d5b5551eef8
35
+ # https://www.iana.org/assignments/language-subtag-registry/language-subtag-registry
33
36
  langcodes = (
34
37
  (0x0C00, 'custom default'), # Default custom locale language-Default custom sublanguage'
35
38
  (0x1400, 'ui_custom_default'), # Default custom MUI locale language-Default custom MUI sublanguage
@@ -38,10 +41,15 @@ langcodes = (
38
41
  (0x0800, 'sys default'), # System default locale language-System default sublanguage
39
42
  (0x1000, 'custom unspecified'), # Unspecified custom locale language-Unspecified custom sublanguage
40
43
  (0x0400, 'default'), # User default locale language-User default sublanguage
44
+ (0x0036, 'af'), # AFRIKAANS
41
45
  (0x0436, 'af-ZA'), # AFRIKAANS_SOUTH_AFRICA
46
+ (0x001C, 'sq'), # ALBANIAN
42
47
  (0x041C, 'sq-AL'), # ALBANIAN_ALBANIA
48
+ (0x0084, 'gsw'), # ALSATIAN
43
49
  (0x0484, 'gsw-FR'), # ALSATIAN_FRANCE
50
+ (0x005E, 'am'), # AMHARIC
44
51
  (0x045E, 'am-ET'), # AMHARIC_ETHIOPIA
52
+ (0x0001, 'ar'), # ARABIC
45
53
  (0x1401, 'ar-DZ'), # ARABIC_ALGERIA
46
54
  (0x3C01, 'ar-BH'), # ARABIC_BAHRAIN
47
55
  (0x0C01, 'ar-EG'), # ARABIC_EGYPT
@@ -58,42 +66,78 @@ langcodes = (
58
66
  (0x1C01, 'ar-TN'), # ARABIC_TUNISIA
59
67
  (0x3801, 'ar-AE'), # ARABIC_UAE
60
68
  (0x2401, 'ar-YE'), # ARABIC_YEMEN
69
+ (0x4401, 'ar-Ploc-SA'), # ARABIC PSEUDO LOCALE
70
+ (0x4801, 'ar-145'),
71
+ (0x002B, 'hy'), # ARMENIAN
61
72
  (0x042B, 'hy-AM'), # ARMENIAN_ARMENIA
73
+ (0x004D, 'as'), # ASSAMESE
62
74
  (0x044D, 'as-IN'), # ASSAMESE_INDIA
63
- (0x082C, 'az-AZ-Cyrillic'), # AZERI_CYRILLIC
64
- (0x042C, 'az-AZ-Latin'), # AZERI_LATIN
65
- (0x0445, 'bn-Bangledesh'), # BANGLA_BANGLADESH AND BANGLA_INDIA
66
- (0x0845, 'bn-IN'), # BANGLA_INDIA
75
+ (0x002C, 'az'), # AZERBAIJANI (LATIN)
76
+ (0x742C, 'az-Cyrl'), # AZERBAIJANI (CYRILLIC)
77
+ (0x082C, 'az-Cyrl-AZ'), # AZERBAIJANI (CYRILLIC) AZERBAIJAN
78
+ (0x782C, 'az-Latn'), # AZERBAIJANI (LATIN)
79
+ (0x042C, 'az-Latn-AZ'), # AZERBAIJANI (LATIN) AZERBAIJAN
80
+ (0x0045, 'bn'), # BANGLA
81
+ (0x0845, 'bn-BD'), # BANGLA BANGLADESH
82
+ (0x0445, 'bn-IN'), # BANGLA INDIA
83
+ (0x006D, 'ba'), # BASHKIR
67
84
  (0x046D, 'ba-RU'), # BASHKIR_RUSSIA
68
- (0x042D, 'Basque-Basque'), # BASQUE_BASQUE
85
+ (0x002D, 'eu'), # BASQUE
86
+ (0x042D, 'eu-ES'), # BASQUE SPAIN
87
+ (0x0023, 'be'), # BELARUSIAN
69
88
  (0x0423, 'be-BY'), # BELARUSIAN_BELARUS
70
- (0x781A, 'bs-neutral'), # BOSNIAN NEUTRAL
71
- (0x201A, 'bs-BA-Cyrillic'), # BOSNIAN_BOSNIA_HERZEGOVINA_CYRILLIC
72
- (0x141A, 'bs-BA-Latin'), # BOSNIAN_BOSNIA_HERZEGOVINA_LATIN
89
+ (0x0066, 'bin'), # BINI
90
+ (0x0466, 'bin-NG'), # BINI NIGERIA
91
+ (0x641A, 'bs-Cyrl'), # BOSNIAN (CYRILLIC)
92
+ (0x201A, 'bs-Cyrl-BA'), # BOSNIAN (CYRILLIC) BOSNIA AND HERZEGOVINA
93
+ (0x781A, 'bs'), # BOSNIAN (LATIN)
94
+ (0x681A, 'bs-Latn'), # BOSNIAN (LATIN)
95
+ (0x141A, 'bs-Latn-BA'), # BOSNIAN (LATIN) BOSNIA AND HERZEGOVINA
96
+ (0x007E, 'br'), # BRETON
73
97
  (0x047E, 'br-FR'), # BRETON_FRANCE
98
+ (0x0002, 'bg'), # BULGARIAN
74
99
  (0x0402, 'bg-BG'), # BULGARIAN_BULGARIA
75
- (0x0492, 'ku-IQ'), # CENTRAL_KURDISH_IRAQ
76
- (0x045C, 'chr-Cher'), # CHEROKEE_CHEROKEE
100
+ (0x0055, 'my'), # BURMESE
101
+ (0x0455, 'my-MM'), # BURMESE MYANMAR
102
+ (0x0003, 'ca'), # CATALAN
77
103
  (0x0403, 'ca-ES'), # CATALAN_CATALAN
104
+ (0x0092, 'ku'), # CENTRAL KURDISH
105
+ (0x7C92, 'ku-Arab'), # CENTRAL KURDISH
106
+ (0x0492, 'ku-Arab-IQ'), # CENTRAL KURDISH IRAQ
107
+ (0x005C, 'chr'), # CHEROKEE
108
+ (0x045C, 'chr-Cher-US'), # CHEROKEE UNITED STATES
109
+ (0x7C5C, 'chr-Cher'), # CHEROKEE
110
+ (0x7804, 'zh'), # CHINESE (SIMPLIFIED)
78
111
  (0x0C04, 'zh-HK'), # CHINESE_HONGKONG
79
112
  (0x1404, 'zh-MO'), # CHINESE_MACAU
80
113
  (0x1004, 'zh-SG'), # CHINESE_SINGAPORE
114
+ (0x0804, 'zh-CN'), # CHINESE (SIMPLIFIED) PEOPLE'S REPUBLIC OF CHINA
115
+ (0x0404, 'zh-TW'), # CHINESE (TRADITIONAL) TAIWAN
81
116
  (0x0004, 'zh-Hans'), # CHINESE_SIMPLIFIED
82
117
  (0x7C04, 'zh-Hant'), # CHINESE_TRADITIONAL
118
+ (0x0083, 'co'), # CORSICAN
83
119
  (0x0483, 'co-FR'), # CORSICAN_FRANCE
84
120
  (0x001A, 'hr'), # CROATIAN Neutral
85
121
  (0x101A, 'hr-BA'), # CROATIAN_BOSNIA_HERZEGOVINA_LATIN
86
122
  (0x041A, 'hr-HR'), # CROATIAN_CROATIA
123
+ (0x0005, 'cs'), # CZECH
87
124
  (0x0405, 'cs-CZ'), # CZECH_CZECH_REPUBLIC
125
+ (0x0006, 'da'), # DANISH
88
126
  (0x0406, 'da-DK'), # DANISH_DENMARK
127
+ (0x008C, 'prs'), # DARI
89
128
  (0x048C, 'prs-AF'), # DARI_AFGHANISTAN
129
+ (0x0065, 'dv'), # DIVEHI
90
130
  (0x0465, 'dv-MV'), # DIVEHI_MALDIVES
131
+ (0x0013, 'nl'), # DUTCH
91
132
  (0x0813, 'nl-BE'), # DUTCH_BELGIAN
92
133
  (0x0413, 'nl-NL'), # DUTCH DUTCH
134
+ (0x0C51, 'dz-BT'), # DZONGKHA BHUTAN
135
+ (0x0009, 'en'), # ENGLISH
93
136
  (0x0C09, 'en-AU'), # ENGLISH_AUS
94
137
  (0x2809, 'en-BZ'), # ENGLISH_BELIZE
95
138
  (0x1009, 'en-CA'), # ENGLISH_CAN
96
139
  (0x2409, 'en-029'), # ENGLISH_CARIBBEAN
140
+ (0x3C09, 'en-HK'), # ENGLISH HONG KONG
97
141
  (0x4009, 'en-IN'), # ENGLISH_INDIA
98
142
  (0x1809, 'en-IE'), # ENGLISH_IRELAND
99
143
  (0x2009, 'en-JM'), # ENGLISH_JAMAICA
@@ -105,160 +149,381 @@ langcodes = (
105
149
  (0x2C09, 'en-TT'), # ENGLISH_TRINIDAD
106
150
  (0x0809, 'en-GB'), # ENGLISH_UK
107
151
  (0x0409, 'en-US'), # ENGLISH_US
152
+ (0x4C09, 'en-AE'), # ENGLISH UNITED ARAB EMIRATES
108
153
  (0x3009, 'en-ZW'), # ENGLISH_ZIMBABWE
154
+ (0x3809, 'en-ID'), # ENGLISH INDONESIAN
155
+ (0x5009, 'en-BH'), # ENGLISH BAHRAIN
156
+ (0x5409, 'en-EG'), # ENGLISH EGYPT
157
+ (0x5809, 'en-JO'), # ENGLISH JORDAN
158
+ (0x5C09, 'en-KW'), # ENGLISH KUWAIT
159
+ (0x6009, 'en-TR'), # ENGLISH TURKEY
160
+ (0x6409, 'en-YE'), # ENGLISH YEMEN
161
+ (0x0025, 'et'), # ESTONIAN
109
162
  (0x0425, 'et-EE'), # ESTONIAN_ESTONIA
163
+ (0x0038, 'fo'), # FAROESE
110
164
  (0x0438, 'fo-FO'), # FAEROESE_FAROE_ISLANDS
165
+ (0x0064, 'fil'), # FILIPINO
111
166
  (0x0464, 'fil-PH'), # FILIPINO_PHILIPPINES
167
+ (0x000B, 'fi'), # FINNISH
112
168
  (0x040B, 'fi-FI'), # FINNISH_FINLAND
169
+ (0x000C, 'fr'), # FRENCH
113
170
  (0x080c, 'fr-BE'), # FRENCH_BELGIAN
114
171
  (0x0C0C, 'fr-CA'), # FRENCH_CANADIAN
172
+ (0x2C0C, 'fr-CM'), # FRENCH CAMEROON
173
+ (0x1C0C, 'fr-029'), # FRENCH CARIBBEAN
174
+ (0x240C, 'fr-CD'), # FRENCH CONGO, DRC
175
+ (0x300C, 'fr-CI'), # FRENCH CÔTE D'IVOIRE
115
176
  (0x040c, 'fr-FR'), # FRENCH_FRENCH
177
+ (0x3C0C, 'fr-HT'), # FRENCH HAITI
116
178
  (0x140C, 'fr-LU'), # FRENCH_LUXEMBOURG
179
+ (0x340C, 'fr-ML'), # FRENCH MALI
117
180
  (0x180C, 'fr-MC'), # FRENCH_MONACO
181
+ (0x380C, 'fr-MA'), # FRENCH MOROCCO
182
+ (0x200C, 'fr-RE'), # FRENCH REUNION
183
+ (0x280C, 'fr-SN'), # FRENCH SENEGAL
118
184
  (0x100C, 'fr-CH'), # FRENCH_SWISS
185
+ (0xE40C, 'fr-015'),
186
+ (0x0062, 'fy'), # FRISIAN
119
187
  (0x0462, 'fy-NL'), # FRISIAN_NETHERLANDS
188
+ (0x0067, 'ff'), # FULAH
189
+ (0x7C67, 'ff-Latn'), # FULAH (LATIN)
190
+ (0x0467, 'ff-NG'), # FULAH NIGERIA
191
+ (0x0867, 'ff-Latn-SN'), # FULAH SENEGAL
192
+ (0x0056, 'gl'), # GALICIAN
120
193
  (0x0456, 'gl-ES'), # GALICIAN_GALICIAN
194
+ (0x0037, 'ka'), # GEORGIAN
121
195
  (0x0437, 'ka-GE'), # GEORGIAN_GEORGIA
196
+ (0x0007, 'de'), # GERMAN
122
197
  (0x0C07, 'de-AT'), # GERMAN_AUSTRIAN
123
198
  (0x0407, 'de-DE'), # GERMAN_GERMAN
124
199
  (0x1407, 'de-LI'), # GERMAN_LIECHTENSTEIN
125
200
  (0x1007, 'de-LU'), # GERMAN_LUXEMBOURG
126
201
  (0x0807, 'de-CH'), # GERMAN_SWISS
202
+ (0x0008, 'el'), # GREEK
127
203
  (0x0408, 'el-GR'), # GREEK_GREECE
204
+ (0x006F, 'kl'), # GREENLANDIC
128
205
  (0x046F, 'kl-GL'), # GREENLANDIC_GREENLAND
206
+ (0x0074, 'gn'), # GUARANI
207
+ (0x0474, 'gn-PY'), # GUARANI PARAGUAY
208
+ (0x0047, 'gu'), # GUJARATI
129
209
  (0x0447, 'gu-IN'), # GUJARATI_INDIA
130
- (0x0468, 'ha-NG'), # HAUSA_NIGERIA_LATIN
210
+ (0x0068, 'ha'), # HAUSA (LATIN)
211
+ (0x7C68, 'ha-Latn'), # HAUSA (LATIN)
212
+ (0x0468, 'ha-Latn-NG'), # HAUSA (LATIN) NIGERIA
213
+ (0x0075, 'haw'), # HAWAIIAN
131
214
  (0x0475, 'haw-US'), # HAWAIIAN_US
215
+ (0x000D, 'he'), # HEBREW
132
216
  (0x040D, 'he-IL'), # HEBREW_ISRAEL
217
+ (0x0039, 'hi'), # HINDI
133
218
  (0x0439, 'hi-IN'), # HINDI_INDIA
219
+ (0x000E, 'hu'), # HUNGARIAN
134
220
  (0x040E, 'hu-HU'), # HUNGARIAN_HUNGARY
221
+ (0x000F, 'is'), # ICELANDIC
135
222
  (0x040F, 'is-IS'), # ICELANDIC_ICELAND
223
+ (0x0070, 'ig'), # IGBO
136
224
  (0x0470, 'ig-NG'), # IGBO_NIGERIA
225
+ (0x0021, 'id'), # INDONESIAN
137
226
  (0x0421, 'id-ID'), # INDONESIAN_INDONESIA
138
- (0x085D, 'iu-CA-Latin'), # INUKTITUT_CANADA_LATIN
139
- (0x045D, 'iu-CA'), # INUKTITUT_CANADA
227
+ (0x0069, 'ibb'), # IBIBIO
228
+ (0x0469, 'ibb-NG'), # IBIBIO NIGERIA
229
+ (0x005D, 'iu'), # INUKTITUT (LATIN)
230
+ (0x7C5D, 'iu-Latn'), # INUKTITUT (LATIN)
231
+ (0x085D, 'iu-Latn-CA'), # INUKTITUT (LATIN) CANADA
232
+ (0x785D, 'iu-Cans'), # INUKTITUT (SYLLABICS)
233
+ (0x045D, 'iu-Cans-CA'), # INUKTITUT (SYLLABICS) CANADA
234
+ (0x003C, 'ga'), # IRISH
140
235
  (0x083C, 'ga-IE'), # IRISH_IRELAND
141
- (0x0434, 'xh-ZA'), # XHOSA_SOUTH_AFRICA
142
- (0x0435, 'zu-ZA'), # ZULU_SOUTH_AFRICA
236
+ (0x0010, 'it'), # ITALIAN
143
237
  (0x0410, 'it-IT'), # ITALIAN_ITALIAN
144
238
  (0x0810, 'it-CH'), # ITALIAN_SWISS
239
+ (0x0011, 'ja'), # JAPANESE
145
240
  (0x0411, 'ja-JP'), # JAPANESE_JAPAN
241
+ (0x0811, 'ja-Ploc-JP'), # JAPANESE PSEUDO LOCALE
242
+ (0x0071, 'kr'), # KANURI
243
+ (0x0471, 'kr-Latn-NG'), # KANURI (LATIN) NIGERIA
244
+ (0x004B, 'kn'), # KANNADA
146
245
  (0x044B, 'kn-IN'), # KANNADA_INDIA
246
+ (0x0060, 'ks'), # KASHMIRI
247
+ (0x0460, 'ks-Arab'), # KASHMIRI PERSO-ARABIC
248
+ (0x0860, 'ks-Deva-IN'), # KASHMIRI (DEVANAGARI) INDIA
249
+ (0x003F, 'kk'), # KAZAKH
147
250
  (0x043F, 'kk-KZ'), # KAZAK_KAZAKHSTAN
148
- (0x0453, 'kh-KH'), # KHMER_CAMBODIA
149
- (0x0486, 'qut-GT'), # KICHE_GUATEMALA
251
+ (0x083F, 'kk-Latn-KZ'), # KAZAK (LATIN) KAZAKHSTAN
252
+ (0x7C3F, 'kk-Latn'), # KAZAK (LATIN)
253
+ (0x783F, 'kk-Cyrl'), # KAZAK (CYRILLIC)
254
+ (0x0053, 'km'), # KHMER
255
+ (0x0453, 'km-KH'), # KHMER CAMBODIA
256
+ (0x0086, 'quc'), # K'ICHE
257
+ (0x0486, 'quc-Latn-GT'), # K'ICHE GUATEMALA
258
+ (0x0087, 'rw'), # KINYARWANDA
150
259
  (0x0487, 'rw-RW'), # KINYARWANDA_RWANDA
260
+ (0x0057, 'kok'), # KONKANI
151
261
  (0x0457, 'kok-IN'), # KONKANI_INDIA
262
+ (0x0012, 'ko'), # KOREAN
152
263
  (0x0412, 'ko-KR'), # KOREA_KOREAN
264
+ (0x0040, 'ky'), # KYRGYZ
153
265
  (0x0440, 'ky-KG'), # KYRGYZ_KYRGYZSTAN
266
+ (0x0054, 'lo'), # LAO
154
267
  (0x0454, 'lo-LA'), # LAO_LAO
268
+ (0x0076, 'la'), # LATIN
269
+ (0x0476, 'la-VA'), # LATIN VATICAN CITY
270
+ (0x0026, 'lv'), # LATVIAN
155
271
  (0x0426, 'lv-LV'), # LATVIAN_LATVIA
272
+ (0x0027, 'lt'), # LITHUANIAN
156
273
  (0x0427, 'lt-LT'), # LITHUANIAN_LITHUANIA
274
+ (0x7C2E, 'dsb'), # LOWER SORBIAN
157
275
  (0x082E, 'dsb-DE'), # LOWER_SORBIAN_GERMANY
276
+ (0x006E, 'lb'), # LUXEMBOURGISH
158
277
  (0x046E, 'lb-LU'), # LUXEMBOURGISH_LUXEMBOURG
278
+ (0x002F, 'mk'), # MACEDONIAN
159
279
  (0x042F, 'mk-MK'), # MACEDONIAN_MACEDONIA
280
+ (0x003E, 'ms'), # MALAY
160
281
  (0x083E, 'ms-BN'), # MALAY_BRUNEI_DARUSSALAM
161
282
  (0x043e, 'ms-MY'), # MALAY_MALAYSIA
283
+ (0x004C, 'ml'), # MALAYALAM
162
284
  (0x044C, 'ml-IN'), # MALAYALAM_INDIA
285
+ (0x003A, 'mt'), # MALTESE
163
286
  (0x043A, 'mt-MT'), # MALTESE_MALTA
287
+ (0x0058, 'mni'), # MANIPURI
288
+ (0x0458, 'mni-IN'), # MANIPURI INDIA
289
+ (0x0081, 'mi'), # MAORI
164
290
  (0x0481, 'mi-NZ'), # MAORI_NEW_ZEALAND
165
- (0x047A, 'arn-CL'), # MAPUDUNGUN_CHILE'
291
+ (0x007A, 'arn'), # MAPUDUNGUN
292
+ (0x047A, 'arn-CL'), # MAPUDUNGUN_CHILE
293
+ (0x004E, 'mr'), # MARATHI
166
294
  (0x044E, 'mr-IN'), # MARATHI_INDIA
295
+ (0x007C, 'moh'), # MOHAWK
167
296
  (0x047C, 'moh-CA'), # MOHAWK_MOHAWK
168
- (0x0450, 'mn-MN-Cyrllic'), # MONGOLIAN_CYRILLIC_MONGOLIA
169
- (0x0850, 'mn-MN-Prc'), # MONGOLIAN_PRC
297
+ (0x0050, 'mn'), # MONGOLIAN (CYRILLIC)
298
+ (0x7850, 'mn-Cyrl'), # MONGOLIAN (CYRILLIC)
299
+ (0x7C50, 'mn-Mong'), # MONGOLIAN (TRADITIONAL MONGOLIAN)
300
+ (0x0C50, 'mn-Mong-MN'), # MONGOLIAN (TRADITIONAL MONGOLIAN) MONGOLIA
301
+ (0x0450, 'mn-MN'), # MONGOLIAN (CYRILLIC) MONGOLIA
302
+ (0x0850, 'mn-Mong-CN'), # MONGOLIAN (TRADITIONAL MONGOLIAN) PEOPLE'S REPUBLIC OF CHINA
303
+ (0x0061, 'ne'), # NEPALI
304
+ (0x0861, 'ne-IN'), # NEPALI INDIA
170
305
  (0x0461, 'ne-NP'), # NEPALI_NEPAL
306
+ (0x0014, 'no'), # NORWEGIAN (BOKMAL)
307
+ (0x7C14, 'nb'), # NORWEGIAN (BOKMAL)
308
+ (0x7814, 'nn'), # NORWEGIAN (NYNORSK)
309
+ (0x0814, 'nn-NO'), # NORWEGIAN (NYNORSK) NORWAY
171
310
  (0x0414, 'nb-NO'), # NORWEGIAN_BOKMAL
172
- (0x0814, 'no-NO'), # NORWEGIAN_NYNORSK
311
+ (0x0082, 'oc'), # OCCITAN
173
312
  (0x0482, 'oc-FR'), # OCCITAN_FRANCE
313
+ (0x0048, 'or'), # ODIA
174
314
  (0x0448, 'or-IN'), # ORIYA_INDIA
315
+ (0x0472, 'om-ET'), # OROMO ETHIOPIA
316
+ (0x0072, 'om'), # OROMO
317
+ (0x0079, 'pap'), # PAPIAMENTO
318
+ (0x0479, 'pap-029'),
319
+ (0x0063, 'ps'), # PASHTO
175
320
  (0x0463, 'ps-AF'), # PASHTO_AFGHANISTAN
321
+ (0x0029, 'fa'), # PERSIAN
176
322
  (0x0429, 'fa-IR'), # PERSIAN_IRAN
323
+ (0x0015, 'pl'), # POLISH
177
324
  (0x0415, 'pl-PL'), # POLISH_POLAND
325
+ (0x0016, 'pt'), # PORTUGUESE
178
326
  (0x0416, 'pt-BR'), # PORTUGUESE_BRAZILIAN
179
327
  (0x0816, 'pt-PT'), # PORTUGUESE-PORTUGUESE
180
- (0x0867, 'ff-SN'), # PULAR_SENEGAL
328
+ (0x05FE, 'qps-ploca'), # PSEUDO LANGUAGE PSEUDO LOCALE FOR EAST ASIAN/COMPLEX SCRIPT LOCALIZATION TESTING
329
+ (0x0501, 'qps-ploc'), # PSEUDO LANGUAGE PSEUDO LOCALE USED FOR LOCALIZATION TESTING
330
+ (0x09FF, 'qps-plocm'), # PSEUDO LANGUAGE PSEUDO LOCALE USED FOR LOCALIZATION TESTING OF MIRRORED LOCALES
331
+ (0x0046, 'pa'), # PUNJABI
332
+ (0x7C46, 'pa-Arab'), # PUNJABI
181
333
  (0x0446, 'pa-IN'), # PUNJABI_INDIA
182
- (0x0846, 'pa-PK'), # PUNJABI_PAKISTAN
334
+ (0x0846, 'pa-Arab-PK'), # PUNJABI ISLAMIC REPUBLIC OF PAKISTAN
335
+ (0x006B, 'quz'), # QUECHUA
183
336
  (0x046B, 'quz-BO'), # QUECHUA_BOLIVIA
184
337
  (0x086B, 'quz-EC'), # QUECHUA_ECUADOR
185
338
  (0x0C6B, 'quz-PE'), # QUECHUA_PERU
339
+ (0x0018, 'ro'), # ROMANIAN
186
340
  (0x0418, 'ro-RO'), # ROMANIAN_ROMANIA
341
+ (0x0818, 'ro-MD'), # ROMANIAN MOLDOVA
342
+ (0x0017, 'rm'), # ROMANSH
187
343
  (0x0417, 'rm-CH'), # ROMANSH_SWITZERLAND
344
+ (0x0019, 'ru'), # RUSSIAN
188
345
  (0x0419, 'ru-RU'), # RUSSIAN_RUSSIA
346
+ (0x0819, 'ru-MD'), # RUSSIAN MOLDOVA
347
+ (0x0085, 'sah'), # SAKHA
189
348
  (0x0485, 'sah-RU'), # SAKHA_RUSSIA
190
- (0x243B, 'smn-FIl'), # SAMI_INARI_FINLAND
349
+ (0x703B, 'smn'), # SAMI (INARI)
350
+ (0x243B, 'smn-FI'), # SAMI (INARI) FINLAND
351
+ (0x7C3B, 'smj'), # SAMI (LULE)
191
352
  (0x103B, 'smj-NO'), # SAMI_LULE_NORWAY
192
353
  (0x143B, 'smj-SE'), # SAMI_LULE_SWEDEN
354
+ (0x003B, 'se'), # SAMI (NORTHERN)
193
355
  (0x0C3B, 'se-FI'), # SAMI_NORTHERN_FINLAND
194
356
  (0x043B, 'se-NO'), # SAMI_NORTHERN_NORWAY
195
357
  (0x083B, 'se-SE'), # SAMI_NORTHERN_SWEDEN
358
+ (0x743B, 'sms'), # SAMI (SKOLT)
196
359
  (0x203B, 'sms-FI'), # SAMI_SKOLT_FINLAND
360
+ (0x783B, 'sma'), # SAMI (SOUTHERN)
197
361
  (0x183B, 'sma-NO'), # SAMI_SOUTHERN_NORWAY
198
362
  (0x1C3B, 'sma-SE'), # SAMI_SOUTHERN_SWEDEN
363
+ (0x004F, 'sa'), # SANSKRIT
199
364
  (0x044F, 'sa-IN'), # SANSKRIT_INDIA
200
- (0x7C1A, 'sr-Neutral'), # SERBIAN_NEUTRAL
201
- (0x1C1A, 'sr-BA'), # SERBIAN_BOSNIA_HERZEGOVINA_CYRILLIC
202
- (0x181A, 'sr-code-Latin'), # SERBIAN_BOSNIA_HERZEGOVINA_LATIN
203
- (0x0C1A, 'sr-CS-Cyrillic'), # SERBIAN_CYRILLIC
204
- (0x081A, 'sr-CS-Latin'), # SERBIAN_LATIN
205
- (0x046C, 'nso-ZA'), # SOTHO_NORTHERN_SOUTH_AFRICA
365
+ (0x0091, 'gd'), # SCOTTISH GAELIC
366
+ (0x0491, 'gd-GB'), # SCOTTISH GAELIC UNITED KINGDOM
367
+ (0x6C1A, 'sr-Cyrl'), # SERBIAN (CYRILLIC)
368
+ (0x1C1A, 'sr-Cyrl-BA'), # SERBIAN (CYRILLIC) BOSNIA AND HERZEGOVINA
369
+ (0x301A, 'sr-Cyrl-ME'), # SERBIAN (CYRILLIC) MONTENEGRO
370
+ (0x281A, 'sr-Cyrl-RS'), # SERBIAN (CYRILLIC) SERBIA
371
+ (0x0C1A, 'sr-Cyrl-CS'), # SERBIAN (CYRILLIC) SERBIA AND MONTENEGRO (FORMER)
372
+ (0x701A, 'sr-Latn'), # SERBIAN (LATIN)
373
+ (0x7C1A, 'sr'), # SERBIAN (LATIN)
374
+ (0x181A, 'sr-Latn-BA'), # SERBIAN (LATIN) BOSNIA AND HERZEGOVINA
375
+ (0x2C1A, 'sr-Latn-ME'), # SERBIAN (LATIN) MONTENEGRO
376
+ (0x241A, 'sr-Latn-RS'), # SERBIAN (LATIN) SERBIA
377
+ (0x081A, 'sr-Latn-CS'), # SERBIAN (LATIN) SERBIA AND MONTENEGRO (FORMER)
378
+ (0x0032, 'tn'), # SETSWANA
206
379
  (0x0832, 'tn-BW'), # TSWANA_BOTSWANA
207
380
  (0x0432, 'tn-ZA'), # TSWANA_SOUTH_AFRICA
208
- (0x0859, 'sd-PK'), # SINDHI_PAKISTAN
381
+ (0x0059, 'sd'), # SINDHI
382
+ (0x7C59, 'sd-Arab'), # SINDHI
383
+ (0x0459, 'sd-Deva-IN'), # SINDHI (DEVANAGARI) INDIA
384
+ (0x0859, 'sd-Arab-PK'), # SINDHI ISLAMIC REPUBLIC OF PAKISTAN
385
+ (0x005B, 'si'), # SINHALA
209
386
  (0x045B, 'si-LK'), # SINHALESE_SRI_LANKA
387
+ (0x001B, 'sk'), # SLOVAK
210
388
  (0x041B, 'sk-SK'), # SLOVAK_SLOVAKIA
389
+ (0x0024, 'sl'), # SLOVENIAN
211
390
  (0x0424, 'sl-SI'), # SLOVENIAN_SLOVENIA
391
+ (0x0077, 'so'), # SOMALI
392
+ (0x0477, 'so-SO'), # SOMALI SOMALIA
393
+ (0x0030, 'st'), # SOTHO
394
+ (0x0430, 'st-ZA'), # SOTHO SOUTH AFRICA
395
+ (0x006C, 'nso'), # SESOTHO SA LEBOA
396
+ (0x046C, 'nso-ZA'), # SOTHO_NORTHERN_SOUTH_AFRICA
397
+ (0x000A, 'es'), # SPANISH
212
398
  (0x2C0A, 'es-AR'), # SPANISH_ARGENTINA
213
399
  (0x400A, 'es-BO'), # SPANISH_BOLIVIA
214
400
  (0x340A, 'es-CL'), # SPANISH_CHILE
215
401
  (0x240A, 'es-CO'), # SPANISH_COLOMBIA
216
402
  (0x140A, 'es-CR'), # SPANISH_COSTA_RICA
403
+ (0x5C0A, 'es-CU'), # SPANISH CUBA
217
404
  (0x1C0A, 'es-DO'), # SPANISH_DOMINICAN_REPUBLIC
218
405
  (0x300A, 'es-EC'), # SPANISH_ECUADOR
219
406
  (0x440A, 'es-SV'), # SPANISH_EL_SALVADOR
220
407
  (0x100A, 'es-GT'), # SPANISH_GUATEMALA
221
408
  (0x480A, 'es-HN'), # SPANISH_HONDURAS
409
+ (0x580A, 'es-419'), # SPANISH LATIN AMERICA
222
410
  (0x080A, 'es-MX'), # SPANISH_MEXICAN
223
411
  (0x4C0A, 'es-NI'), # SPANISH_NICARAGUA
224
412
  (0x180A, 'es-PA'), # SPANISH_PANAMA
225
413
  (0x3C0A, 'es-PY'), # SPANISH_PARAGUAY
226
414
  (0x280A, 'es-PE'), # SPANISH_PERU
227
415
  (0x500A, 'es-PR'), # SPANISH_PUERTO_RICO
228
- (0x0C0A, 'es-ES-modern'), # SPANISH_MODERN
229
- (0x040A, 'es-ES-traditional'), # SPANISH
416
+ (0x040A, 'es-ES_tradnl'), # SPANISH SPAIN
417
+ (0x0C0A, 'es-ES'), # SPANISH SPAIN
230
418
  (0x540A, 'es-US'), # SPANISH_US
231
419
  (0x380A, 'es-UY'), # SPANISH_URUGUAY
232
420
  (0x200A, 'es-VE'), # SPANISH_VENEZUELA
421
+ (0x0041, 'sw'), # KISWAHILI
233
422
  (0x0441, 'sw-KE'), # SWAHILI
423
+ (0x001D, 'sv'), # SWEDISH
234
424
  (0x081D, 'sv-FI'), # SWEDISH_FINLAND
235
425
  (0x041D, 'sv-SE'), # SWEDISH_SWEDEN
426
+ (0x005A, 'syr'), # SYRIAC
236
427
  (0x045A, 'syr-SY'), # SYRIAC
237
- (0x0428, 'tg-TJ'), # TAJIK_TAJIKISTAN
238
- (0x085F, 'tzm-DZ'), # TAMAZIGHT_ALGERIA_LATIN
428
+ (0x0028, 'tg'), # TAJIK (CYRILLIC)
429
+ (0x7C28, 'tg-Cyrl'), # TAJIK (CYRILLIC)
430
+ (0x0428, 'tg-Cyrl-TJ'), # TAJIK (CYRILLIC) TAJIKISTAN
431
+ (0x005F, 'tzm'), # TAMAZIGHT (LATIN)
432
+ (0x0C5F, 'tzm-MA'), # TAMAZIGHT MOROCCO
433
+ (0x7C5F, 'tzm-Latn'), # TAMAZIGHT (LATIN)
434
+ (0x085F, 'tzm-Latn-DZ'), # TAMAZIGHT (LATIN) ALGERIA
435
+ (0x045F, 'tzm-Arab-MA'), # CENTRAL ATLAS TAMAZIGHT (ARABIC) MOROCCO
436
+ (0x785F, 'tzm-Tfng'), # TAMAZIGHT (TIFINAGH)
437
+ (0x105F, 'tzm-Tfng-MA'), # TAMAZIGHT (TIFINAGH MOROCCO)
438
+ (0x0049, 'ta'), # TAMIL
239
439
  (0x0449, 'ta-IN'), # TAMIL_INDIA
240
440
  (0x0849, 'ta-LK'), # TAMIL_SRI_LANKA
441
+ (0x0044, 'tt'), # TATAR
241
442
  (0x0444, 'tt-RU'), # TATAR_RUSSIA
443
+ (0x004A, 'te'), # TELUGU
242
444
  (0x044A, 'te-IN'), # TELUGU_INDIA
445
+ (0x001E, 'th'), # THAI
243
446
  (0x041E, 'th-TH'), # THAI_THAILAND
447
+ (0x0051, 'bo'), # TIBETAN
244
448
  (0x0451, 'bo-CN'), # TIBETAN_PRC
449
+ (0x0851, 'bo-BT'), # TIBETAN BHUTAN
450
+ (0x0073, 'ti'), # TIGRINYA
245
451
  (0x0873, 'ti-ER'), # TIGRINYA_ERITREA
246
452
  (0x0473, 'ti-ET'), # TIGRINYA_ETHIOPIA
453
+ (0x0031, 'ts'), # TSONGA
454
+ (0x0431, 'ts-ZA'), # TSONGA SOUTH AFRICA
455
+ (0x001F, 'tr'), # TURKISH
247
456
  (0x041F, 'tr-TR'), # TURKISH_TURKEY
457
+ (0x0042, 'tk'), # TURKMEN
248
458
  (0x0442, 'tk-TM'), # TURKMEN_TURKMENISTAN
459
+ (0x0080, 'ug'), # UYGHUR
460
+ (0x0480, 'ug-CN'), # UIGHUR_PRC
461
+ (0x0022, 'uk'), # UKRAINIAN
249
462
  (0x0422, 'uk-UA'), # UKRAINIAN_UKRAINE
463
+ (0x002E, 'hsb'), # UPPER SORBIAN
250
464
  (0x042E, 'hsb-DE'), # UPPER_SORBIAN_GERMANY
465
+ (0x0020, 'ur'), # URDU
251
466
  (0x0820, 'ur-IN'), # URDU_INDIA
252
467
  (0x0420, 'ur-PK'), # URDU_PAKISTAN
253
- (0x0480, 'ug-CN'), # UIGHUR_PRC
254
- (0x0843, 'uz-UZ-Cyrillic'), # UZBEK_CYRILLIC
255
- (0x0443, 'uz-UZ-Latin'), # UZBEK_LATIN
468
+ (0x0043, 'uz'), # UZBEK (LATIN)
469
+ (0x7C43, 'uz-Latn'), # UZBEK (LATIN)
470
+ (0x0443, 'uz-Latn-UZ'), # UZBEK (LATIN) UZBEKISTAN
471
+ (0x7843, 'uz-Cyrl'), # UZBEK (CYRILLIC)
472
+ (0x0843, 'uz-Cyrl-UZ'), # UZBEK (CYRILLIC) UZBEKISTAN
256
473
  (0x0803, 'ca-ES-Valencia'), # VALENCIAN_VALENCIA
474
+ (0x0033, 've'), # VENDA
475
+ (0x0433, 've-ZA'), # VENDA SOUTH AFRICA
476
+ (0x002A, 'vi'), # VIETNAMESE
257
477
  (0x042A, 'vi-VN'), # VIETNAMESE_VIETNAM
478
+ (0x0052, 'cy'), # WELSH
258
479
  (0x0452, 'cy-GB'), # WELSH_UNITED_KINGDOM
480
+ (0x0088, 'wo'), # WOLOF
259
481
  (0x0488, 'wo-SN'), # WOLOF_SENEGAL
482
+ (0x0034, 'xh'), # XHOSA
483
+ (0x0434, 'xh-ZA'), # XHOSA_SOUTH_AFRICA
484
+ (0x0078, 'ii'), # YI
260
485
  (0x0478, 'ii-CN'), # YI_PRC
486
+ (0x003D, 'yi'), # YIDDISH
487
+ (0x043D, 'yi-001'), # YIDDISH WORLD
488
+ (0x006A, 'yo'), # YORUBA
261
489
  (0x046A, 'yo-NG'), # YORUBA_NIGERIA
490
+ (0x0035, 'zu'), # ZULU
491
+ (0x0435, 'zu-ZA'), # ZULU_SOUTH_AFRICA
492
+
493
+ # See Section 2.2.1 of MS-LCID
494
+ (0x2000, 'custom transient 0x2000'),
495
+ (0x2400, 'custom transient 0x2400'),
496
+ (0x2800, 'custom transient 0x2800'),
497
+ (0x2C00, 'custom transient 0x2C00'),
498
+ (0x3000, 'custom transient 0x3000'),
499
+ (0x3400, 'custom transient 0x3400'),
500
+ (0x3800, 'custom transient 0x3800'),
501
+ (0x3C00, 'custom transient 0x3C00'),
502
+ (0x4000, 'custom transient 0x4000'),
503
+ (0x4400, 'custom transient 0x4400'),
504
+ (0x4800, 'custom transient 0x4800'),
505
+ (0x4C00, 'custom transient 0x4C00'),
506
+ (0x007B, 'undefined and unreserved 0x007B'),
507
+ (0x007D, 'undefined and unreserved 0x007D'),
508
+ (0x0089, 'undefined and unreserved 0x0089'),
509
+ (0x008A, 'undefined and unreserved 0x008A'),
510
+ (0x008B, 'undefined and unreserved 0x008B'),
511
+ (0x008D, 'undefined and unreserved 0x008D'),
512
+ (0x008E, 'undefined and unreserved 0x008E'),
513
+ (0x008F, 'undefined and unreserved 0x008F'),
514
+ (0x0090, 'undefined and unreserved 0x0090'),
515
+ (0x0827, 'undefined and unreserved 0x0827'),
516
+ (0x2008, 'undefined and unreserved 0x2008'),
517
+ (0xF2EE, 'reserved 0xF2EE'),
518
+ (0xEEEE, 'reserved 0xEEEE'),
519
+
520
+ (0x048D, 'plt-MG'), # MALAGASY
521
+ (0x048E, 'zh-yue-HK'), # CHINESE (YUE) HONG KONG
522
+ (0x048F, 'tdd-Tale-CN'), # TAI NÜA (TAI LE) PEOPLE'S REPUBLIC OF CHINA
523
+ (0x0490, 'khb-Talu-CN'), # LÜ (NEW TAI LUE) PEOPLE'S REPUBLIC OF CHINA
524
+
525
+ (0x0093, 'quc, reserved'),
526
+ (0x0493, 'quc-CO, reserved'),
262
527
  )
263
528
 
264
529
  def getLangCodes():
synapse/models/dns.py CHANGED
@@ -3,6 +3,29 @@ import synapse.exc as s_exc
3
3
  import synapse.lib.types as s_types
4
4
  import synapse.lib.module as s_module
5
5
 
6
+ dnsreplycodes = (
7
+ (0, 'NOERROR'),
8
+ (1, 'FORMERR'),
9
+ (2, 'SERVFAIL'),
10
+ (3, 'NXDOMAIN'),
11
+ (4, 'NOTIMP'),
12
+ (5, 'REFUSED'),
13
+ (6, 'YXDOMAIN'),
14
+ (7, 'YXRRSET'),
15
+ (8, 'NXRRSET'),
16
+ (9, 'NOTAUTH'),
17
+ (10, 'NOTZONE'),
18
+ (11, 'DSOTYPENI'),
19
+ (16, 'BADSIG'),
20
+ (17, 'BADKEY'),
21
+ (18, 'BADTIME'),
22
+ (19, 'BADMODE'),
23
+ (20, 'BADNAME'),
24
+ (21, 'BADALG'),
25
+ (22, 'BADTRUNC'),
26
+ (23, 'BADCOOKIE'),
27
+ )
28
+
6
29
  class DnsName(s_types.Str):
7
30
 
8
31
  def postTypeInit(self):
@@ -233,7 +256,7 @@ class DnsModule(s_module.CoreModule):
233
256
 
234
257
  ('server', ('inet:server', {}), {}),
235
258
 
236
- ('reply:code', ('int', {}), {
259
+ ('reply:code', ('int', {'enums': dnsreplycodes, 'enums:strict': False}), {
237
260
  'doc': 'The DNS server response code.'}),
238
261
 
239
262
  ('exe', ('file:bytes', {}), {
@@ -442,7 +442,8 @@ class GeoModule(s_module.CoreModule):
442
442
 
443
443
  'edges': (
444
444
  ((None, 'seenat', 'geo:telem'), {
445
- 'doc': 'The source node was seen at the geo:telem node place and time.'}),
445
+ 'deprecated': True,
446
+ 'doc': 'Deprecated. Please use ``geo:telem:node``.'}),
446
447
  (('geo:place', 'contains', 'geo:place'), {
447
448
  'doc': 'The source place completely contains the target place.'}),
448
449
  ),
@@ -486,6 +487,8 @@ class GeoModule(s_module.CoreModule):
486
487
  'doc': 'The place which includes the latlong value.'}),
487
488
  ('place:name', ('geo:name', {}), {
488
489
  'doc': 'The purported place name. Used for entity resolution.'}),
490
+ ('node', ('ndef', {}), {
491
+ 'doc': 'The node that was observed at the associated time and place.'}),
489
492
  )),
490
493
 
491
494
  ('geo:place:taxonomy', {}, ()),
@@ -983,6 +983,9 @@ class ItModule(s_module.CoreModule):
983
983
  ('it:app:yara:match', ('comp', {'fields': (('rule', 'it:app:yara:rule'), ('file', 'file:bytes'))}), {
984
984
  'doc': 'A YARA rule match to a file.',
985
985
  }),
986
+ ('it:app:yara:netmatch', ('guid', {}), {
987
+ 'doc': 'An instance of a YARA rule network hunting match.',
988
+ }),
986
989
  ('it:app:yara:procmatch', ('guid', {}), {
987
990
  'doc': 'An instance of a YARA rule match to a process.',
988
991
  }),
@@ -2991,14 +2994,27 @@ class ItModule(s_module.CoreModule):
2991
2994
  'doc': 'The STIX id field from the indicator pattern.'}),
2992
2995
  ('name', ('str', {}), {
2993
2996
  'doc': 'The name of the STIX indicator pattern.'}),
2997
+ ('confidence', ('int', {'min': 0, 'max': 100}), {
2998
+ 'doc': 'The confidence field from the STIX indicator.'}),
2999
+ ('revoked', ('bool', {}), {
3000
+ 'doc': 'The revoked field from the STIX indicator.'}),
3001
+ ('description', ('str', {}), {
3002
+ 'doc': 'The description field from the STIX indicator.'}),
2994
3003
  ('pattern', ('str', {}), {
2995
3004
  'doc': 'The STIX indicator pattern text.'}),
3005
+ ('pattern_type', ('str', {'strip': True, 'lower': True,
3006
+ 'enums': 'stix,pcre,sigma,snort,suricata,yara'}), {
3007
+ 'doc': 'The STIX indicator pattern type.'}),
2996
3008
  ('created', ('time', {}), {
2997
3009
  'doc': 'The time that the indicator pattern was first created.'}),
2998
3010
  ('updated', ('time', {}), {
2999
3011
  'doc': 'The time that the indicator pattern was last modified.'}),
3000
3012
  ('labels', ('array', {'type': 'str', 'uniq': True, 'sorted': True}), {
3001
3013
  'doc': 'The label strings embedded in the STIX indicator pattern.'}),
3014
+ ('valid_from', ('time', {}), {
3015
+ 'doc': 'The valid_from field from the STIX indicator.'}),
3016
+ ('valid_until', ('time', {}), {
3017
+ 'doc': 'The valid_until field from the STIX indicator.'}),
3002
3018
  )),
3003
3019
 
3004
3020
  ('it:app:yara:rule', {}, (
@@ -3046,9 +3062,18 @@ class ItModule(s_module.CoreModule):
3046
3062
  'doc': 'The most recent version of the rule evaluated as a match.'}),
3047
3063
  )),
3048
3064
 
3065
+ ('it:app:yara:netmatch', {}, (
3066
+ ('rule', ('it:app:yara:rule', {}), {
3067
+ 'doc': 'The YARA rule that triggered the match.'}),
3068
+ ('version', ('it:semver', {}), {
3069
+ 'doc': 'The most recent version of the rule evaluated as a match.'}),
3070
+ ('node', ('ndef', {'forms': ('inet:fqdn', 'inet:ipv4', 'inet:ipv6', 'inet:url')}), {
3071
+ 'doc': 'The node which matched the rule.'}),
3072
+ )),
3073
+
3049
3074
  ('it:app:yara:procmatch', {}, (
3050
3075
  ('rule', ('it:app:yara:rule', {}), {
3051
- 'doc': 'The YARA rule that matched the file.'}),
3076
+ 'doc': 'The YARA rule that matched the process.'}),
3052
3077
  ('proc', ('it:exec:proc', {}), {
3053
3078
  'doc': 'The process that matched the YARA rule.'}),
3054
3079
  ('time', ('time', {}), {