taegis-sdk-python 1.2.31__tar.gz → 1.2.32__tar.gz

{taegis_sdk_python-1.2.31/taegis_sdk_python.egg-info → taegis_sdk_python-1.2.32}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.2
 Name: taegis-sdk-python
-Version: 1.2.31
+Version: 1.2.32
 Summary: Taegis Python SDK
 Home-page: https://github.com/secureworks/taegis-sdk-python
 Author: Secureworks

taegis_sdk_python-1.2.32/taegis_sdk_python/_version.py

@@ -0,0 +1 @@
+__version__ = "v1.2.32"

{taegis_sdk_python-1.2.31 → taegis_sdk_python-1.2.32}/taegis_sdk_python/services/alerts/mutations.py

@@ -113,7 +113,7 @@ class TaegisSDKAlertsMutation:
     def alerts_service_update_threat_score(
         self, in_: UpdateThreatScoreRequestInput
     ) -> UpdateThreatScoreResponse:
-        """Update threat score for a give list of alert IDs.."""
+        """Update threat score for a given list of alert IDs.."""
         endpoint = "alertsServiceUpdateThreatScore"
 
         result = self.service.execute_mutation(
@@ -128,3 +128,22 @@ class TaegisSDKAlertsMutation:
         raise GraphQLNoRowsInResultSetError(
             "for mutation alertsServiceUpdateThreatScore"
         )
+
+    def alerts_service_update_threat_score_v2(
+        self, in_: UpdateThreatScoreV2RequestInput
+    ) -> UpdateThreatScoreResponse:
+        """Update threat score v2 for a given list of alert IDs.."""
+        endpoint = "alertsServiceUpdateThreatScoreV2"
+
+        result = self.service.execute_mutation(
+            endpoint=endpoint,
+            variables={
+                "in": prepare_input(in_),
+            },
+            output=build_output_string(UpdateThreatScoreResponse),
+        )
+        if result.get(endpoint) is not None:
+            return UpdateThreatScoreResponse.from_dict(result.get(endpoint))
+        raise GraphQLNoRowsInResultSetError(
+            "for mutation alertsServiceUpdateThreatScoreV2"
+        )

{taegis_sdk_python-1.2.31 → taegis_sdk_python-1.2.32}/taegis_sdk_python/services/alerts/types.py

@@ -280,6 +280,19 @@ class UpdateThreatScoreEntry:
     )
 
 
+@dataclass_json
+@dataclass(order=True, eq=True, frozen=True)
+class UpdateThreatScoreV2Entry:
+    """UpdateThreatScoreV2Entry."""
+
+    alert_id: Optional[str] = field(
+        default=None, metadata=config(field_name="alert_id")
+    )
+    threat_score_v2: Optional[float] = field(
+        default=None, metadata=config(field_name="threat_score_v2")
+    )
+
+
 @dataclass_json
 @dataclass(order=True, eq=True, frozen=True)
 class AccountCompromiseDetectorDetailInput:
@@ -1763,6 +1776,19 @@ class UpdateThreatScoreRequestInput:
     )
 
 
+@dataclass_json
+@dataclass(order=True, eq=True, frozen=True)
+class UpdateThreatScoreV2RequestInput:
+    """UpdateThreatScoreV2RequestInput."""
+
+    threat_score_v2: Optional[float] = field(
+        default=None, metadata=config(field_name="threat_score_v2")
+    )
+    alert_ids: Optional[List[UpdateThreatScoreV2Entry]] = field(
+        default=None, metadata=config(field_name="alert_ids")
+    )
+
+
 @dataclass_json
 @dataclass(order=True, eq=True, frozen=True)
 class PasswordSprayDetailInput:
@@ -3097,6 +3123,12 @@ class Alert2:
     threat_score: Optional[float] = field(
         default=None, metadata=config(field_name="threat_score")
     )
+    threat_score_v2: Optional[float] = field(
+        default=None, metadata=config(field_name="threat_score_v2")
+    )
+    observation: Optional[bool] = field(
+        default=None, metadata=config(field_name="observation")
+    )
     metadata: Optional[AlertsMetadata] = field(
         default=None, metadata=config(field_name="metadata")
     )

{taegis_sdk_python-1.2.31 → taegis_sdk_python-1.2.32}/taegis_sdk_python/services/alerts_history/types.py

@@ -1094,15 +1094,27 @@ class Creator:
 
 @dataclass_json
 @dataclass(order=True, eq=True, frozen=True)
-class ResolutionMetadata:
-    """ResolutionMetadata."""
+class ResolutionMetadataHistory:
+    """ResolutionMetadataHistory."""
 
     id: Optional[str] = field(default=None, metadata=config(field_name="id"))
-    user_id: Optional[str] = field(default=None, metadata=config(field_name="user_id"))
+    user_id: Optional[str] = field(
+        default=None,
+        metadata=config(
+            metadata={
+                "deprecated": True,
+                "deprecation_reason": "moving to uuid user id",
+            },
+            field_name="user_id",
+        ),
+    )
     reason: Optional[str] = field(default=None, metadata=config(field_name="reason"))
     num_alerts_affected: Optional[int] = field(
         default=None, metadata=config(field_name="num_alerts_affected")
     )
+    uuid_user_id: Optional[str] = field(
+        default=None, metadata=config(field_name="uuid_user_id")
+    )
     timestamp: Optional[Timestamp] = field(
         default=None, metadata=config(field_name="timestamp")
     )
@@ -1506,7 +1518,7 @@ class AlertSnapshot:
             field_name="status",
         ),
     )
-    resolution_history: Optional[List[ResolutionMetadata]] = field(
+    resolution_history: Optional[List[ResolutionMetadataHistory]] = field(
         default=None, metadata=config(field_name="resolution_history")
     )
     severity_history: Optional[List[SeverityUpdate]] = field(

{taegis_sdk_python-1.2.31 → taegis_sdk_python-1.2.32}/taegis_sdk_python/services/assets2/types.py

@@ -1353,6 +1353,9 @@ class AssetV2:
     agent_policy_version: Optional[str] = field(
         default=None, metadata=config(field_name="agentPolicyVersion")
     )
+    uninstall: Optional[bool] = field(
+        default=None, metadata=config(field_name="uninstall")
+    )
     hostnames: Optional[List[HostnameV2]] = field(
         default=None, metadata=config(field_name="hostnames")
     )

{taegis_sdk_python-1.2.31 → taegis_sdk_python-1.2.32}/taegis_sdk_python/services/collector/types.py

@@ -1153,7 +1153,9 @@ class DataCollector:
     )
     is_ha: Optional[bool] = field(default=None, metadata=config(field_name="isHa"))
     tenant: Optional[str] = field(default=None, metadata=config(field_name="tenant"))
-    nodes: Optional[NodeInfo] = field(default=None, metadata=config(field_name="nodes"))
+    nodes: Optional[List[NodeInfo]] = field(
+        default=None, metadata=config(field_name="nodes")
+    )
     applications: Optional[List[Deployment]] = field(
         default=None, metadata=config(field_name="applications")
     )

{taegis_sdk_python-1.2.31 → taegis_sdk_python-1.2.32}/taegis_sdk_python/services/endpoint_command_manager/mutations.py

@@ -218,3 +218,18 @@ class TaegisSDKEndpointCommandManagerMutation:
         if result.get(endpoint) is not None:
             return Result.from_dict(result.get(endpoint))
         raise GraphQLNoRowsInResultSetError("for mutation deleteFile")
+
+    def insert_command_history(self, arguments: CommandHistoryInput) -> Result:
+        """insert command history."""
+        endpoint = "insertCommandHistory"
+
+        result = self.service.execute_mutation(
+            endpoint=endpoint,
+            variables={
+                "arguments": prepare_input(arguments),
+            },
+            output=build_output_string(Result),
+        )
+        if result.get(endpoint) is not None:
+            return Result.from_dict(result.get(endpoint))
+        raise GraphQLNoRowsInResultSetError("for mutation insertCommandHistory")

{taegis_sdk_python-1.2.31 → taegis_sdk_python-1.2.32}/taegis_sdk_python/services/endpoint_command_manager/types.py

@@ -245,6 +245,41 @@ class IsolationExclusionRule:
     user: Optional[UserInfo] = field(default=None, metadata=config(field_name="User"))
 
 
+@dataclass_json
+@dataclass(order=True, eq=True, frozen=True)
+class CommandHistoryInput:
+    """CommandHistoryInput."""
+
+    endpoint_id: Optional[str] = field(
+        default=None, metadata=config(field_name="EndpointID")
+    )
+    request_id: Optional[str] = field(
+        default=None, metadata=config(field_name="RequestID")
+    )
+    command: Optional[str] = field(default=None, metadata=config(field_name="Command"))
+    issued_at: Optional[str] = field(
+        default=None, metadata=config(field_name="IssuedAt")
+    )
+    response_at: Optional[str] = field(
+        default=None, metadata=config(field_name="ResponseAt")
+    )
+    success: Optional[bool] = field(default=None, metadata=config(field_name="Success"))
+    request_reason: Optional[str] = field(
+        default=None, metadata=config(field_name="RequestReason")
+    )
+    failure_reason: Optional[str] = field(
+        default=None, metadata=config(field_name="FailureReason")
+    )
+    status: Optional[Union[StatusEnum, TaegisEnum]] = field(
+        default=None,
+        metadata=config(
+            encoder=encode_enum,
+            decoder=lambda x: decode_enum(StatusEnum, x),
+            field_name="Status",
+        ),
+    )
+
+
 @dataclass_json
 @dataclass(order=True, eq=True, frozen=True)
 class HistoryEntry:

{taegis_sdk_python-1.2.31 → taegis_sdk_python-1.2.32}/taegis_sdk_python/services/threat/queries.py

@@ -342,9 +342,9 @@ class TaegisSDKThreatQuery:
 
     def threat_intelligence(
         self,
-        threat_object_type: Union[ThreatFacetObject, TaegisEnum],
+        object_type: Union[ThreatFacetObject, TaegisEnum],
+        filters: Optional[ThreatFilter] = None,
         page: Optional[ThreatPageInput] = None,
-        filter_: Optional[ThreatFilter] = None,
     ) -> ThreatIntelligence:
         """Retrieves all intelligence based on input threat object type and filters."""
         endpoint = "threatIntelligence"
@@ -352,9 +352,9 @@ class TaegisSDKThreatQuery:
         result = self.service.execute_query(
             endpoint=endpoint,
             variables={
+                "objectType": prepare_input(object_type),
+                "filters": prepare_input(filters),
                 "page": prepare_input(page),
-                "threatObjectType": prepare_input(threat_object_type),
-                "filter": prepare_input(filter_),
             },
             output=build_output_string(ThreatIntelligence),
         )
@@ -365,8 +365,9 @@ class TaegisSDKThreatQuery:
     def threat_facet_info(
         self,
         object_type: Union[ThreatFacetObject, TaegisEnum],
-        facets: Optional[List[str]] = None,
         filters: Optional[ThreatFilter] = None,
+        facets: Optional[List[str]] = None,
+        facet_objs: Optional[List[str]] = None,
     ) -> List[FacetInfo]:
         """Retrieves facet count based on object type and filters."""
         endpoint = "threatFacetInfo"
@@ -375,8 +376,9 @@ class TaegisSDKThreatQuery:
             endpoint=endpoint,
             variables={
                 "objectType": prepare_input(object_type),
-                "facets": prepare_input(facets),
                 "filters": prepare_input(filters),
+                "facets": prepare_input(facets),
+                "facetObjs": prepare_input(facet_objs),
             },
             output=build_output_string(FacetInfo),
         )

{taegis_sdk_python-1.2.31 → taegis_sdk_python-1.2.32}/taegis_sdk_python/services/threat/types.py

@@ -451,6 +451,12 @@ class ThreatGroupInput:
     """ThreatGroupInput."""
 
     name: Optional[str] = field(default=None, metadata=config(field_name="name"))
+    is_active: Optional[bool] = field(
+        default=None, metadata=config(field_name="IsActive")
+    )
+    thematic_area: Optional[str] = field(
+        default=None, metadata=config(field_name="ThematicArea")
+    )
     objectives: Optional[List[str]] = field(
         default=None, metadata=config(field_name="Objectives")
     )
@@ -784,6 +790,12 @@ class ThreatReportInput:
     """ThreatReportInput."""
 
     id: Optional[str] = field(default=None, metadata=config(field_name="id"))
+    report_type: Optional[str] = field(
+        default=None, metadata=config(field_name="reportType")
+    )
+    report_id: Optional[str] = field(
+        default=None, metadata=config(field_name="reportID")
+    )
     name: Optional[str] = field(default=None, metadata=config(field_name="name"))
     description: Optional[str] = field(
         default=None, metadata=config(field_name="description")
@@ -866,6 +878,12 @@ class ThreatGroup:
         default=None, metadata=config(field_name="sharing_id")
     )
     name: Optional[str] = field(default=None, metadata=config(field_name="name"))
+    is_active: Optional[bool] = field(
+        default=None, metadata=config(field_name="IsActive")
+    )
+    thematic_area: Optional[str] = field(
+        default=None, metadata=config(field_name="ThematicArea")
+    )
     objectives: Optional[List[str]] = field(
         default=None, metadata=config(field_name="Objectives")
     )
@@ -1274,6 +1292,12 @@ class ThreatReport:
         default=None, metadata=config(field_name="spec_version")
     )
     id: Optional[str] = field(default=None, metadata=config(field_name="id"))
+    report_type: Optional[str] = field(
+        default=None, metadata=config(field_name="reportType")
+    )
+    report_id: Optional[str] = field(
+        default=None, metadata=config(field_name="reportID")
+    )
     name: Optional[str] = field(default=None, metadata=config(field_name="name"))
     description: Optional[str] = field(
         default=None, metadata=config(field_name="description")
@@ -1408,6 +1432,45 @@ class ThreatWhereInput:
     vid_contains: Optional[str] = field(
         default=None, metadata=config(field_name="vid_contains")
     )
+    target_sectors: Optional[str] = field(
+        default=None, metadata=config(field_name="targetSectors")
+    )
+    target_sectors_contains: Optional[str] = field(
+        default=None, metadata=config(field_name="targetSectors_contains")
+    )
+    aliases: Optional[str] = field(default=None, metadata=config(field_name="aliases"))
+    aliases_contains: Optional[str] = field(
+        default=None, metadata=config(field_name="aliases_contains")
+    )
+    thematic_area: Optional[str] = field(
+        default=None, metadata=config(field_name="thematicArea")
+    )
+    thematic_area_contains: Optional[str] = field(
+        default=None, metadata=config(field_name="thematicArea_contains")
+    )
+    status: Optional[str] = field(default=None, metadata=config(field_name="status"))
+    status_contains: Optional[str] = field(
+        default=None, metadata=config(field_name="status_contains")
+    )
+    objectives: Optional[str] = field(
+        default=None, metadata=config(field_name="objectives")
+    )
+    objectives_contains: Optional[str] = field(
+        default=None, metadata=config(field_name="objectives_contains")
+    )
+    tools: Optional[str] = field(default=None, metadata=config(field_name="tools"))
+    tools_contains: Optional[str] = field(
+        default=None, metadata=config(field_name="tools_contains")
+    )
+    report_type: Optional[str] = field(
+        default=None, metadata=config(field_name="reportType")
+    )
+    report_id: Optional[str] = field(
+        default=None, metadata=config(field_name="reportID")
+    )
+    report_id_contains: Optional[str] = field(
+        default=None, metadata=config(field_name="reportID_contains")
+    )
     and_: Optional[List["ThreatWhereInput"]] = field(
         default=None, metadata=config(field_name="and")
     )
@@ -2107,9 +2170,6 @@ class ThreatIntelligence:
     intel: Optional[ThreatObjectIntelligence] = field(
         default=None, metadata=config(field_name="intel")
     )
-    facets: Optional[List[Facet]] = field(
-        default=None, metadata=config(field_name="facets")
-    )
     threat_object_type: Optional[Union[ThreatFacetObject, TaegisEnum]] = field(
         default=None,
         metadata=config(

{taegis_sdk_python-1.2.31 → taegis_sdk_python-1.2.32}/taegis_sdk_python/services/users/mutations.py

@@ -273,36 +273,6 @@ class TaegisSDKUsersMutation:
             return ForgotPasswordResponse.from_dict(result.get(endpoint))
         raise GraphQLNoRowsInResultSetError("for mutation resetPassword")
 
-    def need_mfa_reset(self, email: str) -> ForgotPasswordResponse:
-        """Initiate the MFA reset workflow requested by a user."""
-        endpoint = "needMFAReset"
-
-        result = self.service.execute_mutation(
-            endpoint=endpoint,
-            variables={
-                "email": prepare_input(email),
-            },
-            output=build_output_string(ForgotPasswordResponse),
-        )
-        if result.get(endpoint) is not None:
-            return ForgotPasswordResponse.from_dict(result.get(endpoint))
-        raise GraphQLNoRowsInResultSetError("for mutation needMFAReset")
-
-    def reset_mfa(self, mfa_input: MFAResetInput) -> MFAResetResponse:
-        """Set/reset the password for the specified user."""
-        endpoint = "resetMFA"
-
-        result = self.service.execute_mutation(
-            endpoint=endpoint,
-            variables={
-                "mfaInput": prepare_input(mfa_input),
-            },
-            output=build_output_string(MFAResetResponse),
-        )
-        if result.get(endpoint) is not None:
-            return MFAResetResponse.from_dict(result.get(endpoint))
-        raise GraphQLNoRowsInResultSetError("for mutation resetMFA")
-
     def register_tdruser(
         self, registration_input: UserRegistrationInput
     ) -> MFAResetResponse:

{taegis_sdk_python-1.2.31 → taegis_sdk_python-1.2.32}/taegis_sdk_python/services/users/types.py

@@ -463,7 +463,14 @@ class TDRUserTrialInviteInput:
 
     email: Optional[str] = field(default=None, metadata=config(field_name="email"))
     tenant_id: Optional[str] = field(
-        default=None, metadata=config(field_name="tenant_id")
+        default=None,
+        metadata=config(
+            metadata={
+                "deprecated": True,
+                "deprecation_reason": "deprecated since we dont create demo tenant any more",
+            },
+            field_name="tenant_id",
+        ),
     )
     language: Optional[Union[TDRUsersLanguage, TaegisEnum]] = field(
         default=None,
@@ -897,7 +904,14 @@ class TDRUser:
         default=None, metadata=config(field_name="secondary_phone_extension")
     )
     roles: Optional[List[str]] = field(
-        default=None, metadata=config(field_name="roles")
+        default=None,
+        metadata=config(
+            metadata={
+                "deprecated": True,
+                "deprecation_reason": "superseded by `role_assignments`",
+            },
+            field_name="roles",
+        ),
     )
     environments: Optional[List[str]] = field(
         default=None, metadata=config(field_name="environments")
@@ -929,10 +943,24 @@ class TDRUser:
         default=None, metadata=config(field_name="pre_verified")
     )
     tenants: Optional[List[TDRUserTenant]] = field(
-        default=None, metadata=config(field_name="tenants")
+        default=None,
+        metadata=config(
+            metadata={
+                "deprecated": True,
+                "deprecation_reason": "superseded by `role_assignments`",
+            },
+            field_name="tenants",
+        ),
     )
     tenants_v2: Optional[List[TDRUserTenantV2]] = field(
-        default=None, metadata=config(field_name="tenants_v2")
+        default=None,
+        metadata=config(
+            metadata={
+                "deprecated": True,
+                "deprecation_reason": "superseded by `role_assignments`",
+            },
+            field_name="tenants_v2",
+        ),
     )
     accessible_tenants: Optional[List[TDRUserAccessibleTenant]] = field(
         default=None, metadata=config(field_name="accessible_tenants")

{taegis_sdk_python-1.2.31 → taegis_sdk_python-1.2.32}/taegis_sdk_python/services/vdr/types.py

@@ -1039,6 +1039,9 @@ class VdrVulnerabilitiesFiltersInputArgs:
     """VdrVulnerabilitiesFiltersInputArgs."""
 
     cve: Optional[List[str]] = field(default=None, metadata=config(field_name="cve"))
+    vulnerability_group_ids: Optional[List[str]] = field(
+        default=None, metadata=config(field_name="vulnerabilityGroupIds")
+    )
     severity: Optional[List[Union[VdrVulnerabilitySeverity, TaegisEnum]]] = field(
         default=None,
         metadata=config(

{taegis_sdk_python-1.2.31 → taegis_sdk_python-1.2.32/taegis_sdk_python.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.2
 Name: taegis-sdk-python
-Version: 1.2.31
+Version: 1.2.32
 Summary: Taegis Python SDK
 Home-page: https://github.com/secureworks/taegis-sdk-python
 Author: Secureworks

taegis_sdk_python-1.2.31/taegis_sdk_python/_version.py

@@ -1 +0,0 @@
-__version__ = "v1.2.31"