taegis-sdk-python 1.2.31__tar.gz → 1.2.33__tar.gz

{taegis_sdk_python-1.2.31/taegis_sdk_python.egg-info → taegis_sdk_python-1.2.33}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.2
 Name: taegis-sdk-python
-Version: 1.2.31
+Version: 1.2.33
 Summary: Taegis Python SDK
 Home-page: https://github.com/secureworks/taegis-sdk-python
 Author: Secureworks

taegis_sdk_python-1.2.33/taegis_sdk_python/_version.py

@@ -0,0 +1 @@
+__version__ = "v1.2.33"

{taegis_sdk_python-1.2.31 → taegis_sdk_python-1.2.33}/taegis_sdk_python/services/alerts/mutations.py

@@ -113,7 +113,7 @@ class TaegisSDKAlertsMutation:
     def alerts_service_update_threat_score(
         self, in_: UpdateThreatScoreRequestInput
     ) -> UpdateThreatScoreResponse:
-        """Update threat score for a give list of alert IDs.."""
+        """Update threat score for a given list of alert IDs.."""
         endpoint = "alertsServiceUpdateThreatScore"
 
         result = self.service.execute_mutation(
@@ -128,3 +128,22 @@ class TaegisSDKAlertsMutation:
         raise GraphQLNoRowsInResultSetError(
             "for mutation alertsServiceUpdateThreatScore"
         )
+
+    def alerts_service_update_threat_score_v2(
+        self, in_: UpdateThreatScoreV2RequestInput
+    ) -> UpdateThreatScoreResponse:
+        """Update threat score v2 for a given list of alert IDs.."""
+        endpoint = "alertsServiceUpdateThreatScoreV2"
+
+        result = self.service.execute_mutation(
+            endpoint=endpoint,
+            variables={
+                "in": prepare_input(in_),
+            },
+            output=build_output_string(UpdateThreatScoreResponse),
+        )
+        if result.get(endpoint) is not None:
+            return UpdateThreatScoreResponse.from_dict(result.get(endpoint))
+        raise GraphQLNoRowsInResultSetError(
+            "for mutation alertsServiceUpdateThreatScoreV2"
+        )

{taegis_sdk_python-1.2.31 → taegis_sdk_python-1.2.33}/taegis_sdk_python/services/alerts/types.py

@@ -280,6 +280,19 @@ class UpdateThreatScoreEntry:
     )
 
 
+@dataclass_json
+@dataclass(order=True, eq=True, frozen=True)
+class UpdateThreatScoreV2Entry:
+    """UpdateThreatScoreV2Entry."""
+
+    alert_id: Optional[str] = field(
+        default=None, metadata=config(field_name="alert_id")
+    )
+    threat_score_v2: Optional[float] = field(
+        default=None, metadata=config(field_name="threat_score_v2")
+    )
+
+
 @dataclass_json
 @dataclass(order=True, eq=True, frozen=True)
 class AccountCompromiseDetectorDetailInput:
@@ -1763,6 +1776,19 @@ class UpdateThreatScoreRequestInput:
     )
 
 
+@dataclass_json
+@dataclass(order=True, eq=True, frozen=True)
+class UpdateThreatScoreV2RequestInput:
+    """UpdateThreatScoreV2RequestInput."""
+
+    threat_score_v2: Optional[float] = field(
+        default=None, metadata=config(field_name="threat_score_v2")
+    )
+    alert_ids: Optional[List[UpdateThreatScoreV2Entry]] = field(
+        default=None, metadata=config(field_name="alert_ids")
+    )
+
+
 @dataclass_json
 @dataclass(order=True, eq=True, frozen=True)
 class PasswordSprayDetailInput:
@@ -3097,6 +3123,12 @@ class Alert2:
     threat_score: Optional[float] = field(
         default=None, metadata=config(field_name="threat_score")
     )
+    threat_score_v2: Optional[float] = field(
+        default=None, metadata=config(field_name="threat_score_v2")
+    )
+    observation: Optional[bool] = field(
+        default=None, metadata=config(field_name="observation")
+    )
     metadata: Optional[AlertsMetadata] = field(
         default=None, metadata=config(field_name="metadata")
     )

{taegis_sdk_python-1.2.31 → taegis_sdk_python-1.2.33}/taegis_sdk_python/services/alerts_history/types.py

@@ -1094,15 +1094,27 @@ class Creator:
 
 @dataclass_json
 @dataclass(order=True, eq=True, frozen=True)
-class ResolutionMetadata:
-    """ResolutionMetadata."""
+class ResolutionMetadataHistory:
+    """ResolutionMetadataHistory."""
 
     id: Optional[str] = field(default=None, metadata=config(field_name="id"))
-    user_id: Optional[str] = field(default=None, metadata=config(field_name="user_id"))
+    user_id: Optional[str] = field(
+        default=None,
+        metadata=config(
+            metadata={
+                "deprecated": True,
+                "deprecation_reason": "moving to uuid user id",
+            },
+            field_name="user_id",
+        ),
+    )
     reason: Optional[str] = field(default=None, metadata=config(field_name="reason"))
     num_alerts_affected: Optional[int] = field(
         default=None, metadata=config(field_name="num_alerts_affected")
     )
+    uuid_user_id: Optional[str] = field(
+        default=None, metadata=config(field_name="uuid_user_id")
+    )
     timestamp: Optional[Timestamp] = field(
         default=None, metadata=config(field_name="timestamp")
     )
@@ -1506,7 +1518,7 @@ class AlertSnapshot:
             field_name="status",
         ),
     )
-    resolution_history: Optional[List[ResolutionMetadata]] = field(
+    resolution_history: Optional[List[ResolutionMetadataHistory]] = field(
         default=None, metadata=config(field_name="resolution_history")
     )
     severity_history: Optional[List[SeverityUpdate]] = field(

{taegis_sdk_python-1.2.31 → taegis_sdk_python-1.2.33}/taegis_sdk_python/services/assets2/types.py

@@ -1353,6 +1353,9 @@ class AssetV2:
     agent_policy_version: Optional[str] = field(
         default=None, metadata=config(field_name="agentPolicyVersion")
     )
+    uninstall: Optional[bool] = field(
+        default=None, metadata=config(field_name="uninstall")
+    )
     hostnames: Optional[List[HostnameV2]] = field(
         default=None, metadata=config(field_name="hostnames")
     )

{taegis_sdk_python-1.2.31 → taegis_sdk_python-1.2.33}/taegis_sdk_python/services/collector/types.py

@@ -1153,7 +1153,9 @@ class DataCollector:
     )
     is_ha: Optional[bool] = field(default=None, metadata=config(field_name="isHa"))
     tenant: Optional[str] = field(default=None, metadata=config(field_name="tenant"))
-    nodes: Optional[NodeInfo] = field(default=None, metadata=config(field_name="nodes"))
+    nodes: Optional[List[NodeInfo]] = field(
+        default=None, metadata=config(field_name="nodes")
+    )
     applications: Optional[List[Deployment]] = field(
         default=None, metadata=config(field_name="applications")
     )

{taegis_sdk_python-1.2.31 → taegis_sdk_python-1.2.33}/taegis_sdk_python/services/endpoint_command_manager/mutations.py

@@ -218,3 +218,18 @@ class TaegisSDKEndpointCommandManagerMutation:
         if result.get(endpoint) is not None:
             return Result.from_dict(result.get(endpoint))
         raise GraphQLNoRowsInResultSetError("for mutation deleteFile")
+
+    def insert_command_history(self, arguments: CommandHistoryInput) -> Result:
+        """insert command history."""
+        endpoint = "insertCommandHistory"
+
+        result = self.service.execute_mutation(
+            endpoint=endpoint,
+            variables={
+                "arguments": prepare_input(arguments),
+            },
+            output=build_output_string(Result),
+        )
+        if result.get(endpoint) is not None:
+            return Result.from_dict(result.get(endpoint))
+        raise GraphQLNoRowsInResultSetError("for mutation insertCommandHistory")

{taegis_sdk_python-1.2.31 → taegis_sdk_python-1.2.33}/taegis_sdk_python/services/endpoint_command_manager/types.py

@@ -245,6 +245,41 @@ class IsolationExclusionRule:
     user: Optional[UserInfo] = field(default=None, metadata=config(field_name="User"))
 
 
+@dataclass_json
+@dataclass(order=True, eq=True, frozen=True)
+class CommandHistoryInput:
+    """CommandHistoryInput."""
+
+    endpoint_id: Optional[str] = field(
+        default=None, metadata=config(field_name="EndpointID")
+    )
+    request_id: Optional[str] = field(
+        default=None, metadata=config(field_name="RequestID")
+    )
+    command: Optional[str] = field(default=None, metadata=config(field_name="Command"))
+    issued_at: Optional[str] = field(
+        default=None, metadata=config(field_name="IssuedAt")
+    )
+    response_at: Optional[str] = field(
+        default=None, metadata=config(field_name="ResponseAt")
+    )
+    success: Optional[bool] = field(default=None, metadata=config(field_name="Success"))
+    request_reason: Optional[str] = field(
+        default=None, metadata=config(field_name="RequestReason")
+    )
+    failure_reason: Optional[str] = field(
+        default=None, metadata=config(field_name="FailureReason")
+    )
+    status: Optional[Union[StatusEnum, TaegisEnum]] = field(
+        default=None,
+        metadata=config(
+            encoder=encode_enum,
+            decoder=lambda x: decode_enum(StatusEnum, x),
+            field_name="Status",
+        ),
+    )
+
+
 @dataclass_json
 @dataclass(order=True, eq=True, frozen=True)
 class HistoryEntry:

{taegis_sdk_python-1.2.31 → taegis_sdk_python-1.2.33}/taegis_sdk_python/services/endpoint_management_service/mutations.py

@@ -147,6 +147,10 @@ class TaegisSDKEndpointManagementServiceMutation:
         """update agent settings item."""
         endpoint = "updateAgentSetting"
 
+        log.warning(
+            f"GraphQL Mutation `{endpoint}` is deprecated: 'Use V2 api for update functionality'"
+        )
+
         result = self.service.execute_mutation(
             endpoint=endpoint,
             variables={
@@ -159,10 +163,32 @@ class TaegisSDKEndpointManagementServiceMutation:
             return AgentSetting.from_dict(result.get(endpoint))
         raise GraphQLNoRowsInResultSetError("for mutation updateAgentSetting")
 
+    def update_agent_setting_v2(
+        self, id_: str, input_: UpdateAgentSettingsInput
+    ) -> AgentSetting:
+        """update the default agent settings item."""
+        endpoint = "updateAgentSettingV2"
+
+        result = self.service.execute_mutation(
+            endpoint=endpoint,
+            variables={
+                "id": prepare_input(id_),
+                "input": prepare_input(input_),
+            },
+            output=build_output_string(AgentSetting),
+        )
+        if result.get(endpoint) is not None:
+            return AgentSetting.from_dict(result.get(endpoint))
+        raise GraphQLNoRowsInResultSetError("for mutation updateAgentSettingV2")
+
     def update_default_agent_setting(self, input_: AgentSettingsInput) -> AgentSetting:
         """update the default agent settings item."""
         endpoint = "updateDefaultAgentSetting"
 
+        log.warning(
+            f"GraphQL Mutation `{endpoint}` is deprecated: 'Use V2 api for update functionality'"
+        )
+
         result = self.service.execute_mutation(
             endpoint=endpoint,
             variables={
@@ -174,6 +200,23 @@ class TaegisSDKEndpointManagementServiceMutation:
             return AgentSetting.from_dict(result.get(endpoint))
         raise GraphQLNoRowsInResultSetError("for mutation updateDefaultAgentSetting")
 
+    def update_default_agent_setting_v2(
+        self, input_: UpdateAgentSettingsInput
+    ) -> AgentSetting:
+        """delete agent settings item."""
+        endpoint = "updateDefaultAgentSettingV2"
+
+        result = self.service.execute_mutation(
+            endpoint=endpoint,
+            variables={
+                "input": prepare_input(input_),
+            },
+            output=build_output_string(AgentSetting),
+        )
+        if result.get(endpoint) is not None:
+            return AgentSetting.from_dict(result.get(endpoint))
+        raise GraphQLNoRowsInResultSetError("for mutation updateDefaultAgentSettingV2")
+
     def delete_agent_setting(self, id_: str) -> bool:
         """delete agent settings item."""
         endpoint = "deleteAgentSetting"

{taegis_sdk_python-1.2.31 → taegis_sdk_python-1.2.33}/taegis_sdk_python/services/endpoint_management_service/types.py

@@ -65,6 +65,7 @@ class AgentSettingsProfile(str, Enum):
     """AgentSettingsProfile."""
 
     DEFAULT = "DEFAULT"
+    EARLY_ACCESS = "EARLY_ACCESS"
 
 
 @dataclass_json
@@ -740,6 +741,45 @@ class MaintenanceWindowDefaults:
     )
 
 
+@dataclass_json
+@dataclass(order=True, eq=True, frozen=True)
+class UpdateAgentSettingsInput:
+    """UpdateAgentSettingsInput."""
+
+    name: Optional[str] = field(default=None, metadata=config(field_name="name"))
+    description: Optional[str] = field(
+        default=None, metadata=config(field_name="description")
+    )
+    channel: Optional[str] = field(default=None, metadata=config(field_name="channel"))
+    advanced_kernel_telemetry: Optional[AdvancedKernelTelemetryInput] = field(
+        default=None, metadata=config(field_name="advancedKernelTelemetry")
+    )
+    auto_archive: Optional[AutoArchiveInput] = field(
+        default=None, metadata=config(field_name="autoArchive")
+    )
+    file_analysis: Optional[BooleanSettingInput] = field(
+        default=None, metadata=config(field_name="fileAnalysis")
+    )
+    tamper_protection: Optional[BooleanSettingInput] = field(
+        default=None, metadata=config(field_name="tamperProtection")
+    )
+    ngav: Optional[NGAVInput] = field(default=None, metadata=config(field_name="ngav"))
+    policy_type: Optional[Union[PolicyType, TaegisEnum]] = field(
+        default=None,
+        metadata=config(
+            encoder=encode_enum,
+            decoder=lambda x: decode_enum(PolicyType, x),
+            field_name="policyType",
+        ),
+    )
+    maintenance_window: Optional[MaintenanceWindowInput] = field(
+        default=None, metadata=config(field_name="maintenanceWindow")
+    )
+    experimental_settings: Optional[List[ExperimentalSettingsInput]] = field(
+        default=None, metadata=config(field_name="experimentalSettings")
+    )
+
+
 @dataclass_json
 @dataclass(order=True, eq=True, frozen=True)
 class AgentSettingsInput:

{taegis_sdk_python-1.2.31 → taegis_sdk_python-1.2.33}/taegis_sdk_python/services/tenants/types.py

@@ -598,13 +598,25 @@ class SAMLSSOConfiguration:
         default=None, metadata=config(field_name="metadataFileName")
     )
     signing_cert_name: Optional[str] = field(
-        default=None, metadata=config(field_name="signingCertName")
+        default=None,
+        metadata=config(
+            metadata={"deprecated": True, "deprecation_reason": "No longer supported"},
+            field_name="signingCertName",
+        ),
     )
     signing_cert: Optional[str] = field(
-        default=None, metadata=config(field_name="signingCert")
+        default=None,
+        metadata=config(
+            metadata={"deprecated": True, "deprecation_reason": "No longer supported"},
+            field_name="signingCert",
+        ),
     )
     sign_in_endpoint: Optional[str] = field(
-        default=None, metadata=config(field_name="signInEndpoint")
+        default=None,
+        metadata=config(
+            metadata={"deprecated": True, "deprecation_reason": "No longer supported"},
+            field_name="signInEndpoint",
+        ),
     )
 
 
@@ -930,6 +942,7 @@ class InternalSearchInputs:
     environment: Optional[Union[SSOEnvironment, TaegisEnum]] = field(
         default=None,
         metadata=config(
+            metadata={"deprecated": True, "deprecation_reason": "No longer supported"},
             encoder=encode_enum,
             decoder=lambda x: decode_enum(SSOEnvironment, x),
             field_name="environment",
@@ -938,6 +951,7 @@ class InternalSearchInputs:
     with_auth0_domain_type: Optional[Union[Auth0DomainType, TaegisEnum]] = field(
         default=None,
         metadata=config(
+            metadata={"deprecated": True, "deprecation_reason": "No longer supported"},
             encoder=encode_enum,
             decoder=lambda x: decode_enum(Auth0DomainType, x),
             field_name="withAuth0DomainType",
@@ -1134,6 +1148,7 @@ class UpdateSSOConnectionInput:
     auth0_domain_type: Optional[Union[Auth0DomainType, TaegisEnum]] = field(
         default=None,
         metadata=config(
+            metadata={"deprecated": True, "deprecation_reason": "No longer supported"},
             encoder=encode_enum,
             decoder=lambda x: decode_enum(Auth0DomainType, x),
             field_name="auth0DomainType",
@@ -1200,6 +1215,7 @@ class TenantSSOConnectionQueryInput:
     environment: Optional[Union[SSOEnvironment, TaegisEnum]] = field(
         default=None,
         metadata=config(
+            metadata={"deprecated": True, "deprecation_reason": "No longer supported"},
             encoder=encode_enum,
             decoder=lambda x: decode_enum(SSOEnvironment, x),
             field_name="environment",
@@ -1224,6 +1240,7 @@ class TenantSSOConnectionQueryInput:
     with_auth0_domain_type: Optional[Union[Auth0DomainType, TaegisEnum]] = field(
         default=None,
         metadata=config(
+            metadata={"deprecated": True, "deprecation_reason": "No longer supported"},
             encoder=encode_enum,
             decoder=lambda x: decode_enum(Auth0DomainType, x),
             field_name="withAuth0DomainType",
@@ -1265,6 +1282,7 @@ class NewSSOConnectionInput:
     auth0_domain_type: Optional[Union[Auth0DomainType, TaegisEnum]] = field(
         default=None,
         metadata=config(
+            metadata={"deprecated": True, "deprecation_reason": "No longer supported"},
             encoder=encode_enum,
             decoder=lambda x: decode_enum(Auth0DomainType, x),
             field_name="auth0DomainType",
@@ -1454,6 +1472,7 @@ class SSOConnection:
     auth0_domain_type: Optional[Union[Auth0DomainType, TaegisEnum]] = field(
         default=None,
         metadata=config(
+            metadata={"deprecated": True, "deprecation_reason": "No longer supported"},
             encoder=encode_enum,
             decoder=lambda x: decode_enum(Auth0DomainType, x),
             field_name="auth0DomainType",

{taegis_sdk_python-1.2.31 → taegis_sdk_python-1.2.33}/taegis_sdk_python/services/threat/queries.py

@@ -342,9 +342,9 @@ class TaegisSDKThreatQuery:
 
     def threat_intelligence(
         self,
-        threat_object_type: Union[ThreatFacetObject, TaegisEnum],
+        object_type: Union[ThreatFacetObject, TaegisEnum],
+        filters: Optional[ThreatFilter] = None,
         page: Optional[ThreatPageInput] = None,
-        filter_: Optional[ThreatFilter] = None,
     ) -> ThreatIntelligence:
         """Retrieves all intelligence based on input threat object type and filters."""
         endpoint = "threatIntelligence"
@@ -352,9 +352,9 @@ class TaegisSDKThreatQuery:
         result = self.service.execute_query(
             endpoint=endpoint,
             variables={
+                "objectType": prepare_input(object_type),
+                "filters": prepare_input(filters),
                 "page": prepare_input(page),
-                "threatObjectType": prepare_input(threat_object_type),
-                "filter": prepare_input(filter_),
             },
             output=build_output_string(ThreatIntelligence),
         )
@@ -365,8 +365,9 @@ class TaegisSDKThreatQuery:
     def threat_facet_info(
         self,
         object_type: Union[ThreatFacetObject, TaegisEnum],
-        facets: Optional[List[str]] = None,
         filters: Optional[ThreatFilter] = None,
+        facets: Optional[List[str]] = None,
+        facet_objs: Optional[List[str]] = None,
     ) -> List[FacetInfo]:
         """Retrieves facet count based on object type and filters."""
         endpoint = "threatFacetInfo"
@@ -375,8 +376,9 @@ class TaegisSDKThreatQuery:
             endpoint=endpoint,
             variables={
                 "objectType": prepare_input(object_type),
-                "facets": prepare_input(facets),
                 "filters": prepare_input(filters),
+                "facets": prepare_input(facets),
+                "facetObjs": prepare_input(facet_objs),
             },
             output=build_output_string(FacetInfo),
         )