taegis-sdk-python 1.2.23__tar.gz → 1.2.24__tar.gz

{taegis_sdk_python-1.2.23/taegis_sdk_python.egg-info → taegis_sdk_python-1.2.24}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: taegis-sdk-python
-Version: 1.2.23
+Version: 1.2.24
 Summary: Taegis Python SDK
 Home-page: https://github.com/secureworks/taegis-sdk-python
 Author: Secureworks
@@ -84,7 +84,7 @@ pp(result)
 
 ```python
 results = service.events.subscription.event_query(
-    query="FROM process EARLIEST=-30d",
+    query="FROM process EARLIEST=-1d",
     options=EventQueryOptions(
         max_rows=20,
         page_size=10,

{taegis_sdk_python-1.2.23 → taegis_sdk_python-1.2.24}/README.md

@@ -58,7 +58,7 @@ pp(result)
 
 ```python
 results = service.events.subscription.event_query(
-    query="FROM process EARLIEST=-30d",
+    query="FROM process EARLIEST=-1d",
     options=EventQueryOptions(
         max_rows=20,
         page_size=10,

taegis_sdk_python-1.2.24/taegis_sdk_python/_version.py

@@ -0,0 +1 @@
+__version__ = "v1.2.24"

{taegis_sdk_python-1.2.23 → taegis_sdk_python-1.2.24}/taegis_sdk_python/services/assets2/types.py

@@ -201,7 +201,16 @@ class AutoArchive:
     """AutoArchive."""
 
     enabled: Optional[bool] = field(default=None, metadata=config(field_name="enabled"))
-    period: Optional[int] = field(default=None, metadata=config(field_name="period"))
+    period: Optional[int] = field(
+        default=None,
+        metadata=config(
+            metadata={"deprecated": True, "deprecation_reason": "use periodDays"},
+            field_name="period",
+        ),
+    )
+    period_days: Optional[int] = field(
+        default=None, metadata=config(field_name="periodDays")
+    )
 
 
 @dataclass_json

{taegis_sdk_python-1.2.23 → taegis_sdk_python-1.2.24}/taegis_sdk_python/services/collector/queries.py

@@ -727,3 +727,18 @@ class TaegisSDKCollectorQuery:
         if result.get(endpoint) is not None:
             return result.get(endpoint)
         raise GraphQLNoRowsInResultSetError("for query getClustersPasswordHash")
+
+    def get_data_collectors(self, input_: QlQueryInput) -> DataCollectorResult:
+        """Searches and/or aggregates on Data collectors cql schema."""
+        endpoint = "getDataCollectors"
+
+        result = self.service.execute_query(
+            endpoint=endpoint,
+            variables={
+                "input": prepare_input(input_),
+            },
+            output=build_output_string(DataCollectorResult),
+        )
+        if result.get(endpoint) is not None:
+            return DataCollectorResult.from_dict(result.get(endpoint))
+        raise GraphQLNoRowsInResultSetError("for query getDataCollectors")

{taegis_sdk_python-1.2.23 → taegis_sdk_python-1.2.24}/taegis_sdk_python/services/collector/types.py

@@ -710,6 +710,36 @@ class SyslogMessageCountV2Arguments:
     )
 
 
+@dataclass_json
+@dataclass(order=True, eq=True, frozen=True)
+class QlQueryInput:
+    """QlQueryInput."""
+
+    cql_query: Optional[str] = field(
+        default=None, metadata=config(field_name="cqlQuery")
+    )
+    cursor: Optional[str] = field(default=None, metadata=config(field_name="cursor"))
+    count: Optional[int] = field(default=None, metadata=config(field_name="count"))
+
+
+@dataclass_json
+@dataclass(order=True, eq=True, frozen=True)
+class QLPageCursor:
+    """QLPageCursor."""
+
+    next_cursor: Optional[str] = field(
+        default=None, metadata=config(field_name="nextCursor")
+    )
+    previous_cursor: Optional[str] = field(
+        default=None, metadata=config(field_name="previousCursor")
+    )
+    cursor: Optional[str] = field(default=None, metadata=config(field_name="cursor"))
+    count: Optional[int] = field(default=None, metadata=config(field_name="count"))
+    total_count: Optional[int] = field(
+        default=None, metadata=config(field_name="totalCount")
+    )
+
+
 @dataclass_json
 @dataclass(order=True, eq=True, frozen=True)
 class ScheduledService:
@@ -973,6 +1003,19 @@ class DataSourceMetrics:
     )
 
 
+@dataclass_json
+@dataclass(order=True, eq=True, frozen=True)
+class NodeInfo:
+    """NodeInfo."""
+
+    node_health: Optional[str] = field(
+        default=None, metadata=config(field_name="nodeHealth")
+    )
+    network: Optional[Network] = field(
+        default=None, metadata=config(field_name="network")
+    )
+
+
 @dataclass_json
 @dataclass(order=True, eq=True, frozen=True)
 class ClusterNode:
@@ -1096,6 +1139,41 @@ class Deployment:
     )
 
 
+@dataclass_json
+@dataclass(order=True, eq=True, frozen=True)
+class DataCollector:
+    """DataCollector."""
+
+    id: Optional[str] = field(default=None, metadata=config(field_name="id"))
+    name: Optional[str] = field(default=None, metadata=config(field_name="name"))
+    type: Optional[str] = field(default=None, metadata=config(field_name="type"))
+    collector_health: Optional[str] = field(
+        default=None, metadata=config(field_name="collectorHealth")
+    )
+    is_ha: Optional[bool] = field(default=None, metadata=config(field_name="isHa"))
+    tenant: Optional[str] = field(default=None, metadata=config(field_name="tenant"))
+    nodes: Optional[NodeInfo] = field(default=None, metadata=config(field_name="nodes"))
+    applications: Optional[List[Deployment]] = field(
+        default=None, metadata=config(field_name="applications")
+    )
+
+
+@dataclass_json
+@dataclass(order=True, eq=True, frozen=True)
+class DataCollectorResult:
+    """DataCollectorResult."""
+
+    aggregation: Optional[List[dict]] = field(
+        default=None, metadata=config(field_name="aggregation")
+    )
+    data_collectors: Optional[List[DataCollector]] = field(
+        default=None, metadata=config(field_name="dataCollectors")
+    )
+    pagination: Optional[QLPageCursor] = field(
+        default=None, metadata=config(field_name="pagination")
+    )
+
+
 @dataclass_json
 @dataclass(order=True, eq=True, frozen=True)
 class ClusterImageInput:
@@ -1235,6 +1313,9 @@ class Cluster:
     ha_cidr_block: Optional[str] = field(
         default=None, metadata=config(field_name="haCidrBlock")
     )
+    partner_tenant_name: Optional[str] = field(
+        default=None, metadata=config(field_name="partnerTenantName")
+    )
     cluster_type: Optional[Union[ClusterType, TaegisEnum]] = field(
         default=None,
         metadata=config(

{taegis_sdk_python-1.2.23 → taegis_sdk_python-1.2.24}/taegis_sdk_python/services/endpoint_command_manager/types.py

@@ -70,6 +70,9 @@ class CommandRequestInput:
         default=None, metadata=config(field_name="endpointID")
     )
     reason: Optional[str] = field(default=None, metadata=config(field_name="reason"))
+    request_id: Optional[str] = field(
+        default=None, metadata=config(field_name="requestID")
+    )
 
 
 @dataclass_json

{taegis_sdk_python-1.2.23 → taegis_sdk_python-1.2.24}/taegis_sdk_python/services/file_info/types.py

@@ -846,8 +846,8 @@ class FileMarkingStatus:
     explanation: Optional[str] = field(
         default=None, metadata=config(field_name="explanation")
     )
-    is_marked_malicious: Optional[bool] = field(
-        default=None, metadata=config(field_name="isMarkedMalicious")
+    is_global_alerting: Optional[bool] = field(
+        default=None, metadata=config(field_name="isGlobalAlerting")
     )
     created_at: Optional[str] = field(
         default=None, metadata=config(field_name="createdAt")
@@ -870,8 +870,8 @@ class FileMarking:
     explanation: Optional[str] = field(
         default=None, metadata=config(field_name="explanation")
     )
-    is_marked_malicious: Optional[bool] = field(
-        default=None, metadata=config(field_name="isMarkedMalicious")
+    is_global_alerting: Optional[bool] = field(
+        default=None, metadata=config(field_name="isGlobalAlerting")
     )
     created_at: Optional[str] = field(
         default=None, metadata=config(field_name="createdAt")
@@ -903,8 +903,8 @@ class FileMarkingInput:
     explanation: Optional[str] = field(
         default=None, metadata=config(field_name="explanation")
     )
-    is_marked_malicious: Optional[bool] = field(
-        default=None, metadata=config(field_name="isMarkedMalicious")
+    is_global_alerting: Optional[bool] = field(
+        default=None, metadata=config(field_name="isGlobalAlerting")
     )
 
 

{taegis_sdk_python-1.2.23 → taegis_sdk_python-1.2.24}/taegis_sdk_python/services/investigations2/types.py

@@ -115,6 +115,13 @@ class InvestigationV2TimelineEntityType(str, Enum):
     AUDIT = "AUDIT"
 
 
+class InvestigationRuleType(str, Enum):
+    """InvestigationRuleType."""
+
+    STATIC = "STATIC"
+    ALERT_THREAD = "ALERT_THREAD"
+
+
 class CommentVisibilityFilter(str, Enum):
     """CommentVisibilityFilter."""
 
@@ -876,6 +883,9 @@ class InvestigationsV2Arguments:
     cql: Optional[str] = field(default=None, metadata=config(field_name="cql"))
     page: Optional[int] = field(default=None, metadata=config(field_name="page"))
     per_page: Optional[int] = field(default=None, metadata=config(field_name="perPage"))
+    tenant_service_filters: Optional[List[str]] = field(
+        default=None, metadata=config(field_name="tenantServiceFilters")
+    )
     search_children_tenants: Optional[bool] = field(
         default=None,
         metadata=config(
@@ -917,124 +927,6 @@ class ExportInvestigationResourcesArgument:
     )
 
 
-@dataclass_json
-@dataclass(order=True, eq=True, frozen=True)
-class CreateInvestigationRuleInput:
-    """CreateInvestigationRuleInput."""
-
-    name: Optional[str] = field(default=None, metadata=config(field_name="name"))
-    title: Optional[str] = field(default=None, metadata=config(field_name="title"))
-    description: Optional[str] = field(
-        default=None, metadata=config(field_name="description")
-    )
-    tags: Optional[List[str]] = field(default=None, metadata=config(field_name="tags"))
-    order: Optional[int] = field(default=None, metadata=config(field_name="order"))
-    filter: Optional[str] = field(default=None, metadata=config(field_name="filter"))
-    append_filter: Optional[str] = field(
-        default=None, metadata=config(field_name="appendFilter")
-    )
-    append_comment: Optional[str] = field(
-        default=None, metadata=config(field_name="appendComment")
-    )
-    group_by: Optional[List[str]] = field(
-        default=None, metadata=config(field_name="groupBy")
-    )
-    group_count: Optional[int] = field(
-        default=None, metadata=config(field_name="groupCount")
-    )
-    group_duration: Optional[str] = field(
-        default=None, metadata=config(field_name="groupDuration")
-    )
-    group_extend_on_append: Optional[bool] = field(
-        default=None, metadata=config(field_name="groupExtendOnAppend")
-    )
-    search_queries: Optional[List[str]] = field(
-        default=None, metadata=config(field_name="searchQueries")
-    )
-    search_window: Optional[str] = field(
-        default=None, metadata=config(field_name="searchWindow")
-    )
-    tenant_filter: Optional[str] = field(
-        default=None, metadata=config(field_name="tenantFilter")
-    )
-    skip_alert_prioritization: Optional[bool] = field(
-        default=None, metadata=config(field_name="skipAlertPrioritization")
-    )
-    template_id: Optional[str] = field(
-        default=None, metadata=config(field_name="templateId")
-    )
-    response_data: Optional[dict] = field(
-        default=None, metadata=config(field_name="responseData")
-    )
-    state: Optional[Union[InvestigationRuleState, TaegisEnum]] = field(
-        default=None,
-        metadata=config(
-            encoder=encode_enum,
-            decoder=lambda x: decode_enum(InvestigationRuleState, x),
-            field_name="state",
-        ),
-    )
-
-
-@dataclass_json
-@dataclass(order=True, eq=True, frozen=True)
-class UpdateInvestigationRuleInput:
-    """UpdateInvestigationRuleInput."""
-
-    id: Optional[str] = field(default=None, metadata=config(field_name="id"))
-    title: Optional[str] = field(default=None, metadata=config(field_name="title"))
-    description: Optional[str] = field(
-        default=None, metadata=config(field_name="description")
-    )
-    tags: Optional[List[str]] = field(default=None, metadata=config(field_name="tags"))
-    order: Optional[int] = field(default=None, metadata=config(field_name="order"))
-    filter: Optional[str] = field(default=None, metadata=config(field_name="filter"))
-    append_filter: Optional[str] = field(
-        default=None, metadata=config(field_name="appendFilter")
-    )
-    append_comment: Optional[str] = field(
-        default=None, metadata=config(field_name="appendComment")
-    )
-    group_by: Optional[List[str]] = field(
-        default=None, metadata=config(field_name="groupBy")
-    )
-    group_count: Optional[int] = field(
-        default=None, metadata=config(field_name="groupCount")
-    )
-    group_duration: Optional[str] = field(
-        default=None, metadata=config(field_name="groupDuration")
-    )
-    group_extend_on_append: Optional[bool] = field(
-        default=None, metadata=config(field_name="groupExtendOnAppend")
-    )
-    search_queries: Optional[List[str]] = field(
-        default=None, metadata=config(field_name="searchQueries")
-    )
-    search_window: Optional[str] = field(
-        default=None, metadata=config(field_name="searchWindow")
-    )
-    tenant_filter: Optional[str] = field(
-        default=None, metadata=config(field_name="tenantFilter")
-    )
-    skip_alert_prioritization: Optional[bool] = field(
-        default=None, metadata=config(field_name="skipAlertPrioritization")
-    )
-    template_id: Optional[str] = field(
-        default=None, metadata=config(field_name="templateId")
-    )
-    response_data: Optional[dict] = field(
-        default=None, metadata=config(field_name="responseData")
-    )
-    state: Optional[Union[InvestigationRuleState, TaegisEnum]] = field(
-        default=None,
-        metadata=config(
-            encoder=encode_enum,
-            decoder=lambda x: decode_enum(InvestigationRuleState, x),
-            field_name="state",
-        ),
-    )
-
-
 @dataclass_json
 @dataclass(order=True, eq=True, frozen=True)
 class InvestigationV2Type:
@@ -1177,6 +1069,140 @@ class CloseInvestigationInput:
     )
 
 
+@dataclass_json
+@dataclass(order=True, eq=True, frozen=True)
+class CreateInvestigationRuleInput:
+    """CreateInvestigationRuleInput."""
+
+    name: Optional[str] = field(default=None, metadata=config(field_name="name"))
+    title: Optional[str] = field(default=None, metadata=config(field_name="title"))
+    description: Optional[str] = field(
+        default=None, metadata=config(field_name="description")
+    )
+    tags: Optional[List[str]] = field(default=None, metadata=config(field_name="tags"))
+    order: Optional[int] = field(default=None, metadata=config(field_name="order"))
+    filter: Optional[str] = field(default=None, metadata=config(field_name="filter"))
+    append_filter: Optional[str] = field(
+        default=None, metadata=config(field_name="appendFilter")
+    )
+    append_comment: Optional[str] = field(
+        default=None, metadata=config(field_name="appendComment")
+    )
+    group_by: Optional[List[str]] = field(
+        default=None, metadata=config(field_name="groupBy")
+    )
+    group_count: Optional[int] = field(
+        default=None, metadata=config(field_name="groupCount")
+    )
+    group_duration: Optional[str] = field(
+        default=None, metadata=config(field_name="groupDuration")
+    )
+    group_extend_on_append: Optional[bool] = field(
+        default=None, metadata=config(field_name="groupExtendOnAppend")
+    )
+    search_queries: Optional[List[str]] = field(
+        default=None, metadata=config(field_name="searchQueries")
+    )
+    search_window: Optional[str] = field(
+        default=None, metadata=config(field_name="searchWindow")
+    )
+    tenant_filter: Optional[str] = field(
+        default=None, metadata=config(field_name="tenantFilter")
+    )
+    skip_alert_prioritization: Optional[bool] = field(
+        default=None, metadata=config(field_name="skipAlertPrioritization")
+    )
+    template_id: Optional[str] = field(
+        default=None, metadata=config(field_name="templateId")
+    )
+    response_data: Optional[dict] = field(
+        default=None, metadata=config(field_name="responseData")
+    )
+    type: Optional[Union[InvestigationRuleType, TaegisEnum]] = field(
+        default=None,
+        metadata=config(
+            encoder=encode_enum,
+            decoder=lambda x: decode_enum(InvestigationRuleType, x),
+            field_name="type",
+        ),
+    )
+    state: Optional[Union[InvestigationRuleState, TaegisEnum]] = field(
+        default=None,
+        metadata=config(
+            encoder=encode_enum,
+            decoder=lambda x: decode_enum(InvestigationRuleState, x),
+            field_name="state",
+        ),
+    )
+
+
+@dataclass_json
+@dataclass(order=True, eq=True, frozen=True)
+class UpdateInvestigationRuleInput:
+    """UpdateInvestigationRuleInput."""
+
+    id: Optional[str] = field(default=None, metadata=config(field_name="id"))
+    title: Optional[str] = field(default=None, metadata=config(field_name="title"))
+    description: Optional[str] = field(
+        default=None, metadata=config(field_name="description")
+    )
+    tags: Optional[List[str]] = field(default=None, metadata=config(field_name="tags"))
+    order: Optional[int] = field(default=None, metadata=config(field_name="order"))
+    filter: Optional[str] = field(default=None, metadata=config(field_name="filter"))
+    append_filter: Optional[str] = field(
+        default=None, metadata=config(field_name="appendFilter")
+    )
+    append_comment: Optional[str] = field(
+        default=None, metadata=config(field_name="appendComment")
+    )
+    group_by: Optional[List[str]] = field(
+        default=None, metadata=config(field_name="groupBy")
+    )
+    group_count: Optional[int] = field(
+        default=None, metadata=config(field_name="groupCount")
+    )
+    group_duration: Optional[str] = field(
+        default=None, metadata=config(field_name="groupDuration")
+    )
+    group_extend_on_append: Optional[bool] = field(
+        default=None, metadata=config(field_name="groupExtendOnAppend")
+    )
+    search_queries: Optional[List[str]] = field(
+        default=None, metadata=config(field_name="searchQueries")
+    )
+    search_window: Optional[str] = field(
+        default=None, metadata=config(field_name="searchWindow")
+    )
+    tenant_filter: Optional[str] = field(
+        default=None, metadata=config(field_name="tenantFilter")
+    )
+    skip_alert_prioritization: Optional[bool] = field(
+        default=None, metadata=config(field_name="skipAlertPrioritization")
+    )
+    template_id: Optional[str] = field(
+        default=None, metadata=config(field_name="templateId")
+    )
+    response_data: Optional[dict] = field(
+        default=None, metadata=config(field_name="responseData")
+    )
+    type: Optional[Union[InvestigationRuleType, TaegisEnum]] = field(
+        default=None,
+        metadata=config(
+            encoder=encode_enum,
+            decoder=lambda x: decode_enum(InvestigationRuleType, x),
+            field_name="type",
+        ),
+    )
+    state: Optional[Union[InvestigationRuleState, TaegisEnum]] = field(
+        default=None,
+        metadata=config(
+            encoder=encode_enum,
+            decoder=lambda x: decode_enum(InvestigationRuleState, x),
+            field_name="state",
+        ),
+    )
+
+
 @dataclass_json
 @dataclass(order=True, eq=True, frozen=True)
 class InvestigationV2TimelineArguments:
@@ -1525,6 +1551,69 @@ class InvestigationTemplate:
     )
 
 
+@dataclass_json
+@dataclass(order=True, eq=True, frozen=True)
+class CommentV2:
+    """CommentV2."""
+
+    id: Optional[str] = field(default=None, metadata=config(field_name="id"))
+    author_id: Optional[str] = field(
+        default=None, metadata=config(field_name="authorId")
+    )
+    created_at: Optional[str] = field(
+        default=None, metadata=config(field_name="createdAt")
+    )
+    updated_at: Optional[str] = field(
+        default=None, metadata=config(field_name="updatedAt")
+    )
+    comment: Optional[str] = field(default=None, metadata=config(field_name="comment"))
+    investigation_id: Optional[str] = field(
+        default=None, metadata=config(field_name="investigationId")
+    )
+    tenant_id: Optional[str] = field(
+        default=None, metadata=config(field_name="tenantId")
+    )
+    mentions_ids: Optional[List[str]] = field(
+        default=None, metadata=config(field_name="mentionsIds")
+    )
+    read_by_ids: Optional[List[str]] = field(
+        default=None, metadata=config(field_name="readByIds")
+    )
+    is_internal: Optional[bool] = field(
+        default=None, metadata=config(field_name="isInternal")
+    )
+    author_subject: Optional[Subject] = field(
+        default=None, metadata=config(field_name="authorSubject")
+    )
+    mentions_subjects: Optional[List[Subject]] = field(
+        default=None, metadata=config(field_name="mentionsSubjects")
+    )
+    read_by_subjects: Optional[List[Subject]] = field(
+        default=None, metadata=config(field_name="readBySubjects")
+    )
+    author: Optional[TDRUser] = field(
+        default=None,
+        metadata=config(
+            metadata={"deprecated": True, "deprecation_reason": "use authorSubject"},
+            field_name="author",
+        ),
+    )
+    mentions_users: Optional[List[TDRUser]] = field(
+        default=None,
+        metadata=config(
+            metadata={"deprecated": True, "deprecation_reason": "use mentionsSubjects"},
+            field_name="mentionsUsers",
+        ),
+    )
+    read_by: Optional[List[TDRUser]] = field(
+        default=None,
+        metadata=config(
+            metadata={"deprecated": True, "deprecation_reason": "use readBySubjects"},
+            field_name="readBy",
+        ),
+    )
+
+
 @dataclass_json
 @dataclass(order=True, eq=True, frozen=True)
 class InvestigationRule:
@@ -1604,6 +1693,14 @@ class InvestigationRule:
     updated_by_subject: Optional[Subject] = field(
         default=None, metadata=config(field_name="updatedBySubject")
     )
+    type: Optional[Union[InvestigationRuleType, TaegisEnum]] = field(
+        default=None,
+        metadata=config(
+            encoder=encode_enum,
+            decoder=lambda x: decode_enum(InvestigationRuleType, x),
+            field_name="type",
+        ),
+    )
     state: Optional[Union[InvestigationRuleState, TaegisEnum]] = field(
         default=None,
         metadata=config(
@@ -1631,69 +1728,6 @@ class InvestigationRule:
     )
 
 
-@dataclass_json
-@dataclass(order=True, eq=True, frozen=True)
-class CommentV2:
-    """CommentV2."""
-
-    id: Optional[str] = field(default=None, metadata=config(field_name="id"))
-    author_id: Optional[str] = field(
-        default=None, metadata=config(field_name="authorId")
-    )
-    created_at: Optional[str] = field(
-        default=None, metadata=config(field_name="createdAt")
-    )
-    updated_at: Optional[str] = field(
-        default=None, metadata=config(field_name="updatedAt")
-    )
-    comment: Optional[str] = field(default=None, metadata=config(field_name="comment"))
-    investigation_id: Optional[str] = field(
-        default=None, metadata=config(field_name="investigationId")
-    )
-    tenant_id: Optional[str] = field(
-        default=None, metadata=config(field_name="tenantId")
-    )
-    mentions_ids: Optional[List[str]] = field(
-        default=None, metadata=config(field_name="mentionsIds")
-    )
-    read_by_ids: Optional[List[str]] = field(
-        default=None, metadata=config(field_name="readByIds")
-    )
-    is_internal: Optional[bool] = field(
-        default=None, metadata=config(field_name="isInternal")
-    )
-    author_subject: Optional[Subject] = field(
-        default=None, metadata=config(field_name="authorSubject")
-    )
-    mentions_subjects: Optional[List[Subject]] = field(
-        default=None, metadata=config(field_name="mentionsSubjects")
-    )
-    read_by_subjects: Optional[List[Subject]] = field(
-        default=None, metadata=config(field_name="readBySubjects")
-    )
-    author: Optional[TDRUser] = field(
-        default=None,
-        metadata=config(
-            metadata={"deprecated": True, "deprecation_reason": "use authorSubject"},
-            field_name="author",
-        ),
-    )
-    mentions_users: Optional[List[TDRUser]] = field(
-        default=None,
-        metadata=config(
-            metadata={"deprecated": True, "deprecation_reason": "use mentionsSubjects"},
-            field_name="mentionsUsers",
-        ),
-    )
-    read_by: Optional[List[TDRUser]] = field(
-        default=None,
-        metadata=config(
-            metadata={"deprecated": True, "deprecation_reason": "use readBySubjects"},
-            field_name="readBy",
-        ),
-    )
-
-
 @dataclass_json
 @dataclass(order=True, eq=True, frozen=True)
 class InvestigationV2:

{taegis_sdk_python-1.2.23 → taegis_sdk_python-1.2.24}/taegis_sdk_python/services/isensor/types.py

@@ -572,6 +572,13 @@ class IsensorDetail:
     is_partner: Optional[bool] = field(
         default=None, metadata=config(field_name="isPartner")
     )
+    ndr_software_version: Optional[str] = field(
+        default=None, metadata=config(field_name="ndrSoftwareVersion")
+    )
+    ips_engine_version: Optional[str] = field(
+        default=None, metadata=config(field_name="ipsEngineVersion")
+    )
+    hw_type: Optional[str] = field(default=None, metadata=config(field_name="hwType"))
     mode: Optional[Union[ISensorMode, TaegisEnum]] = field(
         default=None,
         metadata=config(