taegis-sdk-python 1.1.8__tar.gz → 1.2.0__tar.gz

{taegis-sdk-python-1.1.8/taegis_sdk_python.egg-info → taegis-sdk-python-1.2.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: taegis-sdk-python
-Version: 1.1.8
+Version: 1.2.0
 Summary: Taegis Python SDK
 Home-page: https://github.com/secureworks/taegis-sdk-python
 Author: Secureworks
@@ -11,14 +11,14 @@ Classifier: Operating System :: OS Independent
 Requires-Python: >=3.8
 Description-Content-Type: text/markdown
 License-File: LICENSE
-Requires-Dist: gql
+Requires-Dist: gql>=3.5.0
 Requires-Dist: graphql-core
 Requires-Dist: python-dateutil
 Requires-Dist: oauthlib
 Requires-Dist: requests
 Requires-Dist: requests-oauthlib
 Requires-Dist: dataclasses-json
-Requires-Dist: pyjwt
+Requires-Dist: pyjwt>=2.8.0
 Requires-Dist: requests-toolbelt
 Requires-Dist: websockets
 

{taegis-sdk-python-1.1.8 → taegis-sdk-python-1.2.0}/requirements.txt

@@ -1,10 +1,10 @@
-gql
+gql>=3.5.0
 graphql-core
 python-dateutil
 oauthlib
 requests
 requests-oauthlib
 dataclasses-json
-pyjwt
+pyjwt>=2.8.0
 requests-toolbelt
 websockets

taegis-sdk-python-1.2.0/taegis_sdk_python/_version.py

@@ -0,0 +1 @@
+__version__ = "v1.2.0"

{taegis-sdk-python-1.1.8 → taegis-sdk-python-1.2.0}/taegis_sdk_python/service_core.py

@@ -2,6 +2,7 @@
 
 Taegis ServiceCore manager.
 """
+
 from __future__ import annotations
 
 import logging
@@ -134,6 +135,7 @@ class ServiceCore:
             transport=transport,
             schema=self._schema.schema,
             fetch_schema_from_transport=self._schema.should_fetch_schema(),
+            introspection_args={"input_value_deprecation": True},
         )
 
         with client:
@@ -169,6 +171,7 @@ class ServiceCore:
             transport=transport,
             schema=self._schema.schema,
             fetch_schema_from_transport=self._schema.should_fetch_schema(),
+            introspection_args={"input_value_deprecation": True},
         )
 
         return client

{taegis-sdk-python-1.1.8 → taegis-sdk-python-1.2.0}/taegis_sdk_python/services/__init__.py

@@ -1,6 +1,7 @@
 """
 This needs to be a generated file.  Need to make jinja template.
 """
+
 from typing import Dict, Optional, Any
 
 from taegis_sdk_python._consts import TAEGIS_ENVIRONMENT_URLS
@@ -31,6 +32,7 @@ from taegis_sdk_python.services.event_search import EventSearchService
 from taegis_sdk_python.services.events import EventsService
 from taegis_sdk_python.services.exports import ExportsService
 from taegis_sdk_python.services.fast_ioc import FastIocService
+from taegis_sdk_python.services.file_info import FileInfoService
 from taegis_sdk_python.services.investigations import InvestigationsService
 from taegis_sdk_python.services.investigations2 import Investigations2Service
 from taegis_sdk_python.services.mitre_attack_info import MitreAttackInfoService
@@ -46,6 +48,7 @@ from taegis_sdk_python.services.subjects import SubjectsService
 from taegis_sdk_python.services.tenant_profiles import TenantProfilesService
 from taegis_sdk_python.services.tenants import TenantsService
 from taegis_sdk_python.services.threat import ThreatService
+from taegis_sdk_python.services.threat_score import ThreatScoreService
 from taegis_sdk_python.services.trip import TripService
 from taegis_sdk_python.services.users import UsersService
 
@@ -123,6 +126,7 @@ class GraphQLService:
         self._events = None
         self._exports = None
         self._fast_ioc = None
+        self._file_info = None
         self._investigations = None
         self._investigations2 = None
         self._mitre_attack_info = None
@@ -139,6 +143,7 @@ class GraphQLService:
         self._tenant_profiles = None
         self._tenants = None
         self._threat = None
+        self._threat_score = None
         self._trip = None
         self._users = None
 
@@ -366,6 +371,13 @@ class GraphQLService:
             self._fast_ioc = FastIocService(self)
         return self._fast_ioc
 
+    @property
+    def file_info(self):
+        """FileInfo Service Endpoint."""
+        if not self._file_info:
+            self._file_info = FileInfoService(self)
+        return self._file_info
+
     @property
     def investigations(self):
         """Investigations Service Endpoint."""
@@ -478,6 +490,13 @@ class GraphQLService:
             self._threat = ThreatService(self)
         return self._threat
 
+    @property
+    def threat_score(self):
+        """ThreatScore Service Endpoint."""
+        if not self._threat_score:
+            self._threat_score = ThreatScoreService(self)
+        return self._threat_score
+
     @property
     def trip(self):
         """Trip Service Endpoint."""

{taegis-sdk-python-1.1.8 → taegis-sdk-python-1.2.0}/taegis_sdk_python/services/alerts/queries.py

@@ -156,22 +156,3 @@ class TaegisSDKAlertsQuery:
         raise GraphQLNoRowsInResultSetError(
             "for query alertsServiceAggregateAlertsBySeverity"
         )
-
-    def alerts_service_alerts_dashboard_triage(
-        self, in_: Optional[TriageDashboardInputInput] = None
-    ) -> TriageDashboardOutput:
-        """None."""
-        endpoint = "alertsServiceAlertsDashboardTriage"
-
-        result = self.service.execute_query(
-            endpoint=endpoint,
-            variables={
-                "in": prepare_input(in_),
-            },
-            output=build_output_string(TriageDashboardOutput),
-        )
-        if result.get(endpoint) is not None:
-            return TriageDashboardOutput.from_dict(result.get(endpoint))
-        raise GraphQLNoRowsInResultSetError(
-            "for query alertsServiceAlertsDashboardTriage"
-        )

{taegis-sdk-python-1.1.8 → taegis-sdk-python-1.2.0}/taegis_sdk_python/services/alerts/types.py

@@ -83,6 +83,7 @@ class Origin(str, Enum):
     INTERNAL = "INTERNAL"
     CUSTOMER = "CUSTOMER"
     EXTERNAL = "EXTERNAL"
+    PARTNER = "PARTNER"
 
 
 class RPCResponseStatus(str, Enum):
@@ -225,6 +226,9 @@ class SearchRequestInput:
     metadata: Optional[dict] = field(
         default=None, metadata=config(field_name="metadata")
     )
+    tenant_service_filters: Optional[List[str]] = field(
+        default=None, metadata=config(field_name="tenant_service_filters")
+    )
 
 
 @dataclass_json
@@ -236,31 +240,6 @@ class TimestampInput:
     nanos: Optional[int] = field(default=None, metadata=config(field_name="nanos"))
 
 
-@dataclass_json
-@dataclass(order=True, eq=True, frozen=True)
-class TriageDashboardInputInput:
-    """TriageDashboardInputInput."""
-
-    key: Optional[str] = field(
-        default=None,
-        metadata=config(
-            metadata={
-                "deprecated": True,
-                "deprecation_reason": "a multi-tenant session key is not needed anymore",
-            },
-            field_name="key",
-        ),
-    )
-    service_filters: Optional[List[str]] = field(
-        default=None, metadata=config(field_name="serviceFilters")
-    )
-    show_claimed: Optional[bool] = field(
-        default=None, metadata=config(field_name="showClaimed")
-    )
-    offset: Optional[int] = field(default=None, metadata=config(field_name="offset"))
-    limit: Optional[int] = field(default=None, metadata=config(field_name="limit"))
-
-
 @dataclass_json
 @dataclass(order=True, eq=True, frozen=True)
 class UpdateThreatScoreEntry:
@@ -1350,60 +1329,6 @@ class SeverityUpdate:
     )
 
 
-@dataclass_json
-@dataclass(order=True, eq=True, frozen=True)
-class TenantAlertsToTriage:
-    """TenantAlertsToTriage."""
-
-    tenant_id: Optional[str] = field(
-        default=None, metadata=config(field_name="tenantID")
-    )
-    tenant_name: Optional[str] = field(
-        default=None, metadata=config(field_name="tenantName")
-    )
-    claimed_by: Optional[List[str]] = field(
-        default=None, metadata=config(field_name="claimedBy")
-    )
-    critical: Optional[int] = field(
-        default=None, metadata=config(field_name="critical")
-    )
-    high: Optional[int] = field(default=None, metadata=config(field_name="high"))
-    medium: Optional[int] = field(default=None, metadata=config(field_name="medium"))
-    low: Optional[int] = field(default=None, metadata=config(field_name="low"))
-    info: Optional[int] = field(default=None, metadata=config(field_name="info"))
-    endpoints_affected: Optional[int] = field(
-        default=None, metadata=config(field_name="endpointsAffected")
-    )
-    endpoints_total: Optional[int] = field(
-        default=None, metadata=config(field_name="endpointsTotal")
-    )
-    open_investigations: Optional[int] = field(
-        default=None, metadata=config(field_name="openInvestigations")
-    )
-    services: Optional[List[str]] = field(
-        default=None, metadata=config(field_name="services")
-    )
-    oldest_alert: Optional[Timestamp] = field(
-        default=None, metadata=config(field_name="oldestAlert")
-    )
-
-
-@dataclass_json
-@dataclass(order=True, eq=True, frozen=True)
-class TriageDashboardOutput:
-    """TriageDashboardOutput."""
-
-    total_results: Optional[int] = field(
-        default=None, metadata=config(field_name="totalResults")
-    )
-    next_offset: Optional[int] = field(
-        default=None, metadata=config(field_name="nextOffset")
-    )
-    tenant_triage: Optional[List[TenantAlertsToTriage]] = field(
-        default=None, metadata=config(field_name="tenantTriage")
-    )
-
-
 @dataclass_json
 @dataclass(order=True, eq=True, frozen=True)
 class UpdateResolutionResponse:

{taegis-sdk-python-1.1.8 → taegis-sdk-python-1.2.0}/taegis_sdk_python/services/assets2/queries.py

@@ -334,3 +334,87 @@ class TaegisSDKAssets2Query:
         if result.get(endpoint) is not None:
             return CanIsolateResponse(result.get(endpoint))
         raise GraphQLNoRowsInResultSetError("for query subjectCanIsolate")
+
+    def assets_hostname(
+        self,
+        first: Optional[int] = None,
+        last: Optional[int] = None,
+        after: Optional[str] = None,
+        before: Optional[str] = None,
+        filter_: Optional[AssetHostnameFilter] = None,
+        order_by: Optional[AssetHostnameSearchOrderByInput] = None,
+    ) -> AssetsHostname:
+        """ "Retrieve hostname details."""
+        endpoint = "assetsHostname"
+
+        result = self.service.execute_query(
+            endpoint=endpoint,
+            variables={
+                "first": prepare_input(first),
+                "last": prepare_input(last),
+                "after": prepare_input(after),
+                "before": prepare_input(before),
+                "filter": prepare_input(filter_),
+                "orderBy": prepare_input(order_by),
+            },
+            output=build_output_string(AssetsHostname),
+        )
+        if result.get(endpoint) is not None:
+            return AssetsHostname.from_dict(result.get(endpoint))
+        raise GraphQLNoRowsInResultSetError("for query assetsHostname")
+
+    def assets_ip_address(
+        self,
+        first: Optional[int] = None,
+        last: Optional[int] = None,
+        after: Optional[str] = None,
+        before: Optional[str] = None,
+        filter_: Optional[AssetIPAddressFilter] = None,
+        order_by: Optional[AssetIPAddressSearchOrderByInput] = None,
+    ) -> AssetsIPAddress:
+        """ "Retrieve ipAddress details."""
+        endpoint = "assetsIPAddress"
+
+        result = self.service.execute_query(
+            endpoint=endpoint,
+            variables={
+                "first": prepare_input(first),
+                "last": prepare_input(last),
+                "after": prepare_input(after),
+                "before": prepare_input(before),
+                "filter": prepare_input(filter_),
+                "orderBy": prepare_input(order_by),
+            },
+            output=build_output_string(AssetsIPAddress),
+        )
+        if result.get(endpoint) is not None:
+            return AssetsIPAddress.from_dict(result.get(endpoint))
+        raise GraphQLNoRowsInResultSetError("for query assetsIPAddress")
+
+    def assets_mac_address(
+        self,
+        first: Optional[int] = None,
+        last: Optional[int] = None,
+        after: Optional[str] = None,
+        before: Optional[str] = None,
+        filter_: Optional[AssetMacAddressFilter] = None,
+        order_by: Optional[AssetMacAddressSearchOrderByInput] = None,
+    ) -> AssetsMacAddress:
+        """ "Retrieve Mac details."""
+        endpoint = "assetsMacAddress"
+
+        result = self.service.execute_query(
+            endpoint=endpoint,
+            variables={
+                "first": prepare_input(first),
+                "last": prepare_input(last),
+                "after": prepare_input(after),
+                "before": prepare_input(before),
+                "filter": prepare_input(filter_),
+                "orderBy": prepare_input(order_by),
+            },
+            output=build_output_string(AssetsMacAddress),
+        )
+        if result.get(endpoint) is not None:
+            return AssetsMacAddress.from_dict(result.get(endpoint))
+        raise GraphQLNoRowsInResultSetError("for query assetsMacAddress")