taegis-sdk-python 1.2.34__tar.gz → 1.2.36__tar.gz

{taegis_sdk_python-1.2.34/taegis_sdk_python.egg-info → taegis_sdk_python-1.2.36}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.2
 Name: taegis-sdk-python
-Version: 1.2.34
+Version: 1.2.36
 Summary: Taegis Python SDK
 Home-page: https://github.com/secureworks/taegis-sdk-python
 Author: Secureworks

taegis_sdk_python-1.2.36/taegis_sdk_python/_version.py

@@ -0,0 +1 @@
+__version__ = "v1.2.36"

{taegis_sdk_python-1.2.34 → taegis_sdk_python-1.2.36}/taegis_sdk_python/services/__init__.py

@@ -5,7 +5,7 @@ This needs to be a generated file.  Need to make jinja template.
 import logging
 import threading
 from ssl import SSLContext
-from typing import Any, Dict, Optional, Union, Literal
+from typing import Any, Dict, Literal, Optional, Union
 
 import aiohttp
 from aiohttp.client_reqrep import Fingerprint
@@ -53,6 +53,7 @@ from taegis_sdk_python.services.nl_search import NlSearchService
 from taegis_sdk_python.services.notebooks import NotebooksService
 from taegis_sdk_python.services.notifications import NotificationsService
 from taegis_sdk_python.services.preferences import PreferencesService
+from taegis_sdk_python.services.process_trees import ProcessTreesService
 from taegis_sdk_python.services.queries import QueriesService
 from taegis_sdk_python.services.roadrunner import RoadrunnerService
 from taegis_sdk_python.services.rules import RulesService
@@ -199,6 +200,7 @@ class GraphQLService:
         self._notebooks = None
         self._notifications = None
         self._preferences = None
+        self._process_trees = None
         self._queries = None
         self._roadrunner = None
         self._rules = None
@@ -610,6 +612,13 @@ class GraphQLService:
             self._preferences = PreferencesService(self)
         return self._preferences
 
+    @property
+    def process_tress(self):
+        """Preferences Service Endpoint."""
+        if not self._process_trees:
+            self._process_trees = ProcessTreesService(self)
+        return self._process_trees
+
     @property
     def queries(self):
         """Queries Service Endpoint."""

{taegis_sdk_python-1.2.34 → taegis_sdk_python-1.2.36}/taegis_sdk_python/services/agent/queries.py

@@ -35,7 +35,7 @@ class TaegisSDKAgentQuery:
     def agent_packages(
         self, args: Optional[PackageSearchInput] = None
     ) -> List[Package]:
-        """None."""
+        """search for agent packages ."""
         endpoint = "agentPackages"
 
         result = self.service.execute_query(
@@ -54,7 +54,7 @@ class TaegisSDKAgentQuery:
     def agent_package_signed_url(
         self, args: Optional[PackageDownloadInput] = None
     ) -> PackageSignedUrl:
-        """None."""
+        """get agent package via signed url ."""
         endpoint = "agentPackageSignedUrl"
 
         result = self.service.execute_query(
@@ -69,7 +69,7 @@ class TaegisSDKAgentQuery:
         raise GraphQLNoRowsInResultSetError("for query agentPackageSignedUrl")
 
     def agent_package_signed_url_by_id(self, id_: str) -> PackageSignedUrl:
-        """None."""
+        """get agent package by id via signed url ."""
         endpoint = "agentPackageSignedUrlByID"
 
         result = self.service.execute_query(
@@ -84,7 +84,7 @@ class TaegisSDKAgentQuery:
         raise GraphQLNoRowsInResultSetError("for query agentPackageSignedUrlByID")
 
     def available_channels(self) -> List[ReleaseChannelsConfig]:
-        """None."""
+        """get all available channels ."""
         endpoint = "availableChannels"
 
         result = self.service.execute_query(

taegis_sdk_python-1.2.36/taegis_sdk_python/services/process_trees/__init__.py

@@ -0,0 +1,32 @@
+""""ProcessTrees Service."""
+
+from taegis_sdk_python.service_core import ServiceCore
+from taegis_sdk_python.services.process_trees.mutations import (
+    TaegisSDKProcessTreesMutation,
+)
+from taegis_sdk_python.services.process_trees.queries import TaegisSDKProcessTreesQuery
+from taegis_sdk_python.services.process_trees.subscriptions import (
+    TaegisSDKProcessTreesSubscription,
+)
+
+
+class ProcessTreesService(ServiceCore):
+    """Taegis ProcessTrees Service."""
+
+    @property
+    def query(self):
+        if not self._queries:
+            self._queries = TaegisSDKProcessTreesQuery(self)
+        return self._queries
+
+    @property
+    def mutation(self):
+        if not self._mutations:
+            self._mutations = TaegisSDKProcessTreesMutation(self)
+        return self._mutations
+
+    @property
+    def subscription(self):
+        if not self._subscriptions:
+            self._subscriptions = TaegisSDKProcessTreesSubscription(self)
+        return self._subscriptions

taegis_sdk_python-1.2.36/taegis_sdk_python/services/process_trees/mutations.py

@@ -0,0 +1,33 @@
+"""ProcessTrees Mutation."""
+
+# pylint: disable=no-member, unused-argument, too-many-locals, duplicate-code, wildcard-import, unused-wildcard-import, cyclic-import
+
+
+# Autogenerated
+# DO NOT MODIFY
+
+from __future__ import annotations
+
+import logging
+from typing import TYPE_CHECKING, Any, Dict, List, Optional, Tuple, Union
+
+from taegis_sdk_python import GraphQLNoRowsInResultSetError
+from taegis_sdk_python._consts import TaegisEnum
+from taegis_sdk_python.services.process_trees.types import *
+from taegis_sdk_python.utils import (
+    build_output_string,
+    parse_union_result,
+    prepare_input,
+)
+
+if TYPE_CHECKING:  # pragma: no cover
+    from taegis_sdk_python.services.process_trees import ProcessTreesService
+
+log = logging.getLogger(__name__)
+
+
+class TaegisSDKProcessTreesMutation:
+    """Taegis Process_trees Mutation operations."""
+
+    def __init__(self, service: ProcessTreesService):
+        self.service = service

taegis_sdk_python-1.2.36/taegis_sdk_python/services/process_trees/queries.py

@@ -0,0 +1,83 @@
+"""ProcessTrees Query."""
+
+# pylint: disable=no-member, unused-argument, too-many-locals, duplicate-code, wildcard-import, unused-wildcard-import, cyclic-import
+
+
+# Autogenerated
+# DO NOT MODIFY
+
+from __future__ import annotations
+
+import logging
+from typing import TYPE_CHECKING, Any, Dict, List, Optional, Tuple, Union
+
+from taegis_sdk_python import GraphQLNoRowsInResultSetError
+from taegis_sdk_python.utils import (
+    build_output_string,
+    parse_union_result,
+    prepare_input,
+)
+from taegis_sdk_python._consts import TaegisEnum
+from taegis_sdk_python.services.process_trees.types import *
+
+if TYPE_CHECKING:  # pragma: no cover
+    from taegis_sdk_python.services.process_trees import ProcessTreesService
+
+log = logging.getLogger(__name__)
+
+
+class TaegisSDKProcessTreesQuery:
+    """Taegis Process_trees Query operations."""
+
+    def __init__(self, service: ProcessTreesService):
+        self.service = service
+
+    def get_process_children(
+        self,
+        tenant_id: str,
+        host_id: str,
+        process_correlation_id: str,
+        resource_id: Optional[str] = None,
+    ) -> Children:
+        """None."""
+        endpoint = "GetProcessChildren"
+
+        result = self.service.execute_query(
+            endpoint=endpoint,
+            variables={
+                "tenantID": prepare_input(tenant_id),
+                "hostID": prepare_input(host_id),
+                "processCorrelationID": prepare_input(process_correlation_id),
+                "resourceID": prepare_input(resource_id),
+            },
+            output=build_output_string(Children),
+        )
+        if result.get(endpoint) is not None:
+            return Children.from_dict(result.get(endpoint))
+        raise GraphQLNoRowsInResultSetError("for query GetProcessChildren")
+
+    def get_process_parent(
+        self,
+        tenant_id: str,
+        host_id: str,
+        parent_process_correlation_id: str,
+        resource_id: Optional[str] = None,
+    ) -> ProcessEvent:
+        """None."""
+        endpoint = "GetProcessParent"
+
+        result = self.service.execute_query(
+            endpoint=endpoint,
+            variables={
+                "tenantID": prepare_input(tenant_id),
+                "hostID": prepare_input(host_id),
+                "parentProcessCorrelationID": prepare_input(
+                    parent_process_correlation_id
+                ),
+                "resourceID": prepare_input(resource_id),
+            },
+            output=build_output_string(ProcessEvent),
+        )
+        if result.get(endpoint) is not None:
+            return ProcessEvent.from_dict(result.get(endpoint))
+        raise GraphQLNoRowsInResultSetError("for query GetProcessParent")

taegis_sdk_python-1.2.36/taegis_sdk_python/services/process_trees/subscriptions.py

@@ -0,0 +1,33 @@
+"""ProcessTrees Subscription."""
+
+# pylint: disable=no-member, unused-argument, too-many-locals, duplicate-code, wildcard-import, unused-wildcard-import, cyclic-import
+
+
+# Autogenerated
+# DO NOT MODIFY
+
+from __future__ import annotations
+
+import logging
+from typing import TYPE_CHECKING, Any, Dict, List, Optional, Tuple, Union
+
+from taegis_sdk_python import GraphQLNoRowsInResultSetError
+from taegis_sdk_python._consts import TaegisEnum
+from taegis_sdk_python.services.process_trees.types import *
+from taegis_sdk_python.utils import (
+    build_output_string,
+    parse_union_result,
+    prepare_input,
+)
+
+if TYPE_CHECKING:  # pragma: no cover
+    from taegis_sdk_python.services.process_trees import ProcessTreesService
+
+log = logging.getLogger(__name__)
+
+
+class TaegisSDKProcessTreesSubscription:
+    """Taegis Process_trees Subscription operations."""
+
+    def __init__(self, service: ProcessTreesService):
+        self.service = service

taegis_sdk_python-1.2.36/taegis_sdk_python/services/process_trees/types.py

@@ -0,0 +1,96 @@
+"""ProcessTrees Types and Enums."""
+
+# pylint: disable=no-member, unused-argument, too-many-locals, duplicate-code
+
+# Autogenerated
+# DO NOT MODIFY
+
+from dataclasses import dataclass, field
+
+from typing import Any, Dict, List, Optional, Tuple, Union
+
+from dataclasses_json import config, dataclass_json
+
+
+@dataclass_json
+@dataclass(order=True, eq=True, frozen=True)
+class ProgramHash:
+    """ProgramHash."""
+
+    md5: Optional[str] = field(default=None, metadata=config(field_name="md5"))
+    sha1: Optional[str] = field(default=None, metadata=config(field_name="sha1"))
+    sha256: Optional[str] = field(default=None, metadata=config(field_name="sha256"))
+    sha512: Optional[str] = field(default=None, metadata=config(field_name="sha512"))
+
+
+@dataclass_json
+@dataclass(order=True, eq=True, frozen=True)
+class ProcessEvent:
+    """ProcessEvent."""
+
+    tenant_id: Optional[str] = field(
+        default=None, metadata=config(field_name="tenantID")
+    )
+    host_id: Optional[str] = field(default=None, metadata=config(field_name="hostID"))
+    process_correlation_id: Optional[str] = field(
+        default=None, metadata=config(field_name="processCorrelationID")
+    )
+    resource_id: Optional[str] = field(
+        default=None, metadata=config(field_name="resourceID")
+    )
+    parent_process_correlation_id: Optional[str] = field(
+        default=None, metadata=config(field_name="parentProcessCorrelationID")
+    )
+    process_id: Optional[str] = field(
+        default=None, metadata=config(field_name="processID")
+    )
+    parent_process_id: Optional[str] = field(
+        default=None, metadata=config(field_name="parentProcessID")
+    )
+    process_time_window: Optional[int] = field(
+        default=None, metadata=config(field_name="processTimeWindow")
+    )
+    process_creation_time: Optional[int] = field(
+        default=None, metadata=config(field_name="processCreationTime")
+    )
+    process_is_admin: Optional[bool] = field(
+        default=None, metadata=config(field_name="processIsAdmin")
+    )
+    real_pid: Optional[str] = field(default=None, metadata=config(field_name="realPid"))
+    commandline: Optional[str] = field(
+        default=None, metadata=config(field_name="commandline")
+    )
+    image_path: Optional[str] = field(
+        default=None, metadata=config(field_name="imagePath")
+    )
+    username: Optional[str] = field(
+        default=None, metadata=config(field_name="username")
+    )
+    user_is_admin: Optional[bool] = field(
+        default=None, metadata=config(field_name="userIsAdmin")
+    )
+    normalizer: Optional[str] = field(
+        default=None, metadata=config(field_name="normalizer")
+    )
+    sensor_type: Optional[str] = field(
+        default=None, metadata=config(field_name="sensorType")
+    )
+    children_count: Optional[int] = field(
+        default=None, metadata=config(field_name="childrenCount")
+    )
+    program_hash: Optional[ProgramHash] = field(
+        default=None, metadata=config(field_name="programHash")
+    )
+
+
+@dataclass_json
+@dataclass(order=True, eq=True, frozen=True)
+class Children:
+    """Children."""
+
+    children_count: Optional[int] = field(
+        default=None, metadata=config(field_name="childrenCount")
+    )
+    process_list: Optional[List[ProcessEvent]] = field(
+        default=None, metadata=config(field_name="processList")
+    )

{taegis_sdk_python-1.2.34 → taegis_sdk_python-1.2.36}/taegis_sdk_python/services/sharelinks/mutations.py

@@ -46,3 +46,20 @@ class TaegisSDKSharelinksMutation:
         if result.get(endpoint) is not None:
             return ShareLink.from_dict(result.get(endpoint))
         raise GraphQLNoRowsInResultSetError("for mutation createShareLink")
+
+    def create_share_links(self, input_: List[ShareLinkCreateInput]) -> List[ShareLink]:
+        """Create multiple ShareLinks."""
+        endpoint = "createShareLinks"
+
+        result = self.service.execute_mutation(
+            endpoint=endpoint,
+            variables={
+                "input": prepare_input(input_),
+            },
+            output=build_output_string(ShareLink),
+        )
+        if result.get(endpoint) is not None:
+            return ShareLink.schema().load(
+                [r or {} for r in result.get(endpoint)], many=True
+            )
+        raise GraphQLNoRowsInResultSetError("for mutation createShareLinks")

{taegis_sdk_python-1.2.34 → taegis_sdk_python-1.2.36}/taegis_sdk_python/services/tenants/queries.py

@@ -201,3 +201,18 @@ class TaegisSDKTenantsQuery:
                 [r or {} for r in result.get(endpoint)], many=True
             )
         raise GraphQLNoRowsInResultSetError("for query tenantDecommissionRequests")
+
+    def registered_domains(self) -> List[RegisteredDomain]:
+        """Return the list of registered domains for the tenant in context."""
+        endpoint = "registeredDomains"
+
+        result = self.service.execute_query(
+            endpoint=endpoint,
+            variables={},
+            output=build_output_string(RegisteredDomain),
+        )
+        if result.get(endpoint) is not None:
+            return RegisteredDomain.schema().load(
+                [r or {} for r in result.get(endpoint)], many=True
+            )
+        raise GraphQLNoRowsInResultSetError("for query registeredDomains")

{taegis_sdk_python-1.2.34 → taegis_sdk_python-1.2.36}/taegis_sdk_python/services/vdr/types.py

@@ -401,6 +401,16 @@ class VdrScorePath:
     value: Optional[str] = field(default=None, metadata=config(field_name="value"))
 
 
+@dataclass_json
+@dataclass(order=True, eq=True, frozen=True)
+class VdrVulnerabilityAggregate:
+    """VdrVulnerabilityAggregate."""
+
+    count: Optional[int] = field(default=None, metadata=config(field_name="count"))
+    label: Optional[str] = field(default=None, metadata=config(field_name="label"))
+    value: Optional[str] = field(default=None, metadata=config(field_name="value"))
+
+
 @dataclass_json
 @dataclass(order=True, eq=True, frozen=True)
 class VdrAssetsFiltersInputArgs:
@@ -879,22 +889,6 @@ class VdrVulnerability:
     )
 
 
-@dataclass_json
-@dataclass(order=True, eq=True, frozen=True)
-class VdrVulnerabilityMetrics:
-    """VdrVulnerabilityMetrics."""
-
-    first_discovered: Optional[List[VdrSeriesGroup]] = field(
-        default=None, metadata=config(field_name="firstDiscovered")
-    )
-    last_seen: Optional[List[VdrSeriesGroup]] = field(
-        default=None, metadata=config(field_name="lastSeen")
-    )
-    score_path40: Optional[List[VdrScorePath]] = field(
-        default=None, metadata=config(field_name="scorePath40")
-    )
-
-
 @dataclass_json
 @dataclass(order=True, eq=True, frozen=True)
 class VdrAssetsInputArgs:
@@ -1092,6 +1086,34 @@ class VdrVulnerabilitiesFiltersInputArgs:
     )
 
 
+@dataclass_json
+@dataclass(order=True, eq=True, frozen=True)
+class VdrVulnerabilityMetrics:
+    """VdrVulnerabilityMetrics."""
+
+    attack_class: Optional[List[VdrVulnerabilityAggregate]] = field(
+        default=None, metadata=config(field_name="attackClass")
+    )
+    exploitability: Optional[List[VdrVulnerabilityAggregate]] = field(
+        default=None, metadata=config(field_name="exploitability")
+    )
+    first_discovered: Optional[List[VdrSeriesGroup]] = field(
+        default=None, metadata=config(field_name="firstDiscovered")
+    )
+    last_seen: Optional[List[VdrSeriesGroup]] = field(
+        default=None, metadata=config(field_name="lastSeen")
+    )
+    score_path40: Optional[List[VdrScorePath]] = field(
+        default=None, metadata=config(field_name="scorePath40")
+    )
+    severity: Optional[List[VdrVulnerabilityAggregate]] = field(
+        default=None, metadata=config(field_name="severity")
+    )
+    threat_intel: Optional[List[VdrVulnerabilityAggregate]] = field(
+        default=None, metadata=config(field_name="threatIntel")
+    )
+
+
 @dataclass_json
 @dataclass(order=True, eq=True, frozen=True)
 class VdrAssets:

{taegis_sdk_python-1.2.34 → taegis_sdk_python-1.2.36/taegis_sdk_python.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.2
 Name: taegis-sdk-python
-Version: 1.2.34
+Version: 1.2.36
 Summary: Taegis Python SDK
 Home-page: https://github.com/secureworks/taegis-sdk-python
 Author: Secureworks

{taegis_sdk_python-1.2.34 → taegis_sdk_python-1.2.36}/taegis_sdk_python.egg-info/SOURCES.txt

@@ -185,6 +185,11 @@ taegis_sdk_python/services/preferences/mutations.py
 taegis_sdk_python/services/preferences/queries.py
 taegis_sdk_python/services/preferences/subscriptions.py
 taegis_sdk_python/services/preferences/types.py
+taegis_sdk_python/services/process_trees/__init__.py
+taegis_sdk_python/services/process_trees/mutations.py
+taegis_sdk_python/services/process_trees/queries.py
+taegis_sdk_python/services/process_trees/subscriptions.py
+taegis_sdk_python/services/process_trees/types.py
 taegis_sdk_python/services/queries/__init__.py
 taegis_sdk_python/services/queries/mutations.py
 taegis_sdk_python/services/queries/queries.py

taegis_sdk_python-1.2.34/taegis_sdk_python/_version.py

@@ -1 +0,0 @@
-__version__ = "v1.2.34"