taegis-sdk-python 1.2.22__tar.gz → 1.2.24__tar.gz

{taegis_sdk_python-1.2.22/taegis_sdk_python.egg-info → taegis_sdk_python-1.2.24}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: taegis-sdk-python
-Version: 1.2.22
+Version: 1.2.24
 Summary: Taegis Python SDK
 Home-page: https://github.com/secureworks/taegis-sdk-python
 Author: Secureworks
@@ -84,7 +84,7 @@ pp(result)
 
 ```python
 results = service.events.subscription.event_query(
-    query="FROM process EARLIEST=-30d",
+    query="FROM process EARLIEST=-1d",
     options=EventQueryOptions(
         max_rows=20,
         page_size=10,

{taegis_sdk_python-1.2.22 → taegis_sdk_python-1.2.24}/README.md

@@ -58,7 +58,7 @@ pp(result)
 
 ```python
 results = service.events.subscription.event_query(
-    query="FROM process EARLIEST=-30d",
+    query="FROM process EARLIEST=-1d",
     options=EventQueryOptions(
         max_rows=20,
         page_size=10,

taegis_sdk_python-1.2.24/taegis_sdk_python/_version.py

@@ -0,0 +1 @@
+__version__ = "v1.2.24"

{taegis_sdk_python-1.2.22 → taegis_sdk_python-1.2.24}/taegis_sdk_python/services/__init__.py

@@ -48,6 +48,7 @@ from taegis_sdk_python.services.isensor import IsensorService
 from taegis_sdk_python.services.mitre_attack_info import MitreAttackInfoService
 from taegis_sdk_python.services.multi_tenant_context import MultiTenantContextService
 from taegis_sdk_python.services.multi_tenant_ioc import MultiTenantIocService
+from taegis_sdk_python.services.nl_search import NlSearchService
 from taegis_sdk_python.services.notebooks import NotebooksService
 from taegis_sdk_python.services.notifications import NotificationsService
 from taegis_sdk_python.services.preferences import PreferencesService
@@ -192,6 +193,7 @@ class GraphQLService:
         self._mitre_attack_info = None
         self._multi_tenant_context = None
         self._multi_tenant_ioc = None
+        self._nl_search = None
         self._notebooks = None
         self._notifications = None
         self._preferences = None
@@ -571,6 +573,13 @@ class GraphQLService:
             self._multi_tenant_ioc = MultiTenantIocService(self)
         return self._multi_tenant_ioc
 
+    @property
+    def nl_search(self):
+        """NlSearch Service Endpoint."""
+        if not self._nl_search:
+            self._nl_search = NlSearchService(self)
+        return self._nl_search
+
     @property
     def notebooks(self):
         """Notebooks Service Endpoint."""

{taegis_sdk_python-1.2.22 → taegis_sdk_python-1.2.24}/taegis_sdk_python/services/assets2/types.py

@@ -201,7 +201,16 @@ class AutoArchive:
     """AutoArchive."""
 
     enabled: Optional[bool] = field(default=None, metadata=config(field_name="enabled"))
-    period: Optional[int] = field(default=None, metadata=config(field_name="period"))
+    period: Optional[int] = field(
+        default=None,
+        metadata=config(
+            metadata={"deprecated": True, "deprecation_reason": "use periodDays"},
+            field_name="period",
+        ),
+    )
+    period_days: Optional[int] = field(
+        default=None, metadata=config(field_name="periodDays")
+    )
 
 
 @dataclass_json

{taegis_sdk_python-1.2.22 → taegis_sdk_python-1.2.24}/taegis_sdk_python/services/collector/queries.py

@@ -727,3 +727,18 @@ class TaegisSDKCollectorQuery:
         if result.get(endpoint) is not None:
             return result.get(endpoint)
         raise GraphQLNoRowsInResultSetError("for query getClustersPasswordHash")
+
+    def get_data_collectors(self, input_: QlQueryInput) -> DataCollectorResult:
+        """Searches and/or aggregates on Data collectors cql schema."""
+        endpoint = "getDataCollectors"
+
+        result = self.service.execute_query(
+            endpoint=endpoint,
+            variables={
+                "input": prepare_input(input_),
+            },
+            output=build_output_string(DataCollectorResult),
+        )
+        if result.get(endpoint) is not None:
+            return DataCollectorResult.from_dict(result.get(endpoint))
+        raise GraphQLNoRowsInResultSetError("for query getDataCollectors")

{taegis_sdk_python-1.2.22 → taegis_sdk_python-1.2.24}/taegis_sdk_python/services/collector/types.py

@@ -710,6 +710,36 @@ class SyslogMessageCountV2Arguments:
     )
 
 
+@dataclass_json
+@dataclass(order=True, eq=True, frozen=True)
+class QlQueryInput:
+    """QlQueryInput."""
+
+    cql_query: Optional[str] = field(
+        default=None, metadata=config(field_name="cqlQuery")
+    )
+    cursor: Optional[str] = field(default=None, metadata=config(field_name="cursor"))
+    count: Optional[int] = field(default=None, metadata=config(field_name="count"))
+
+
+@dataclass_json
+@dataclass(order=True, eq=True, frozen=True)
+class QLPageCursor:
+    """QLPageCursor."""
+
+    next_cursor: Optional[str] = field(
+        default=None, metadata=config(field_name="nextCursor")
+    )
+    previous_cursor: Optional[str] = field(
+        default=None, metadata=config(field_name="previousCursor")
+    )
+    cursor: Optional[str] = field(default=None, metadata=config(field_name="cursor"))
+    count: Optional[int] = field(default=None, metadata=config(field_name="count"))
+    total_count: Optional[int] = field(
+        default=None, metadata=config(field_name="totalCount")
+    )
+
+
 @dataclass_json
 @dataclass(order=True, eq=True, frozen=True)
 class ScheduledService:
@@ -973,6 +1003,19 @@ class DataSourceMetrics:
     )
 
 
+@dataclass_json
+@dataclass(order=True, eq=True, frozen=True)
+class NodeInfo:
+    """NodeInfo."""
+
+    node_health: Optional[str] = field(
+        default=None, metadata=config(field_name="nodeHealth")
+    )
+    network: Optional[Network] = field(
+        default=None, metadata=config(field_name="network")
+    )
+
+
 @dataclass_json
 @dataclass(order=True, eq=True, frozen=True)
 class ClusterNode:
@@ -1096,6 +1139,41 @@ class Deployment:
     )
 
 
+@dataclass_json
+@dataclass(order=True, eq=True, frozen=True)
+class DataCollector:
+    """DataCollector."""
+
+    id: Optional[str] = field(default=None, metadata=config(field_name="id"))
+    name: Optional[str] = field(default=None, metadata=config(field_name="name"))
+    type: Optional[str] = field(default=None, metadata=config(field_name="type"))
+    collector_health: Optional[str] = field(
+        default=None, metadata=config(field_name="collectorHealth")
+    )
+    is_ha: Optional[bool] = field(default=None, metadata=config(field_name="isHa"))
+    tenant: Optional[str] = field(default=None, metadata=config(field_name="tenant"))
+    nodes: Optional[NodeInfo] = field(default=None, metadata=config(field_name="nodes"))
+    applications: Optional[List[Deployment]] = field(
+        default=None, metadata=config(field_name="applications")
+    )
+
+
+@dataclass_json
+@dataclass(order=True, eq=True, frozen=True)
+class DataCollectorResult:
+    """DataCollectorResult."""
+
+    aggregation: Optional[List[dict]] = field(
+        default=None, metadata=config(field_name="aggregation")
+    )
+    data_collectors: Optional[List[DataCollector]] = field(
+        default=None, metadata=config(field_name="dataCollectors")
+    )
+    pagination: Optional[QLPageCursor] = field(
+        default=None, metadata=config(field_name="pagination")
+    )
+
+
 @dataclass_json
 @dataclass(order=True, eq=True, frozen=True)
 class ClusterImageInput:
@@ -1235,6 +1313,9 @@ class Cluster:
     ha_cidr_block: Optional[str] = field(
         default=None, metadata=config(field_name="haCidrBlock")
     )
+    partner_tenant_name: Optional[str] = field(
+        default=None, metadata=config(field_name="partnerTenantName")
+    )
     cluster_type: Optional[Union[ClusterType, TaegisEnum]] = field(
         default=None,
         metadata=config(

{taegis_sdk_python-1.2.22 → taegis_sdk_python-1.2.24}/taegis_sdk_python/services/datasources/types.py

@@ -221,6 +221,9 @@ class LastSeenAsset:
     last_seen: Optional[int] = field(
         default=None, metadata=config(field_name="lastSeen")
     )
+    tenant_id: Optional[str] = field(
+        default=None, metadata=config(field_name="tenantID")
+    )
     health: Optional[Union[HealthState, TaegisEnum]] = field(
         default=None,
         metadata=config(

{taegis_sdk_python-1.2.22 → taegis_sdk_python-1.2.24}/taegis_sdk_python/services/endpoint_command_manager/types.py

@@ -70,6 +70,9 @@ class CommandRequestInput:
         default=None, metadata=config(field_name="endpointID")
     )
     reason: Optional[str] = field(default=None, metadata=config(field_name="reason"))
+    request_id: Optional[str] = field(
+        default=None, metadata=config(field_name="requestID")
+    )
 
 
 @dataclass_json

{taegis_sdk_python-1.2.22 → taegis_sdk_python-1.2.24}/taegis_sdk_python/services/file_info/types.py

@@ -846,8 +846,8 @@ class FileMarkingStatus:
     explanation: Optional[str] = field(
         default=None, metadata=config(field_name="explanation")
     )
-    is_marked_malicious: Optional[bool] = field(
-        default=None, metadata=config(field_name="isMarkedMalicious")
+    is_global_alerting: Optional[bool] = field(
+        default=None, metadata=config(field_name="isGlobalAlerting")
     )
     created_at: Optional[str] = field(
         default=None, metadata=config(field_name="createdAt")
@@ -870,8 +870,8 @@ class FileMarking:
     explanation: Optional[str] = field(
         default=None, metadata=config(field_name="explanation")
     )
-    is_marked_malicious: Optional[bool] = field(
-        default=None, metadata=config(field_name="isMarkedMalicious")
+    is_global_alerting: Optional[bool] = field(
+        default=None, metadata=config(field_name="isGlobalAlerting")
     )
     created_at: Optional[str] = field(
         default=None, metadata=config(field_name="createdAt")
@@ -903,8 +903,8 @@ class FileMarkingInput:
     explanation: Optional[str] = field(
         default=None, metadata=config(field_name="explanation")
     )
-    is_marked_malicious: Optional[bool] = field(
-        default=None, metadata=config(field_name="isMarkedMalicious")
+    is_global_alerting: Optional[bool] = field(
+        default=None, metadata=config(field_name="isGlobalAlerting")
     )