taegis-sdk-python 1.2.35__tar.gz → 1.2.36__tar.gz

{taegis_sdk_python-1.2.35/taegis_sdk_python.egg-info → taegis_sdk_python-1.2.36}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.2
 Name: taegis-sdk-python
-Version: 1.2.35
+Version: 1.2.36
 Summary: Taegis Python SDK
 Home-page: https://github.com/secureworks/taegis-sdk-python
 Author: Secureworks

taegis_sdk_python-1.2.36/taegis_sdk_python/_version.py

@@ -0,0 +1 @@
+__version__ = "v1.2.36"

{taegis_sdk_python-1.2.35 → taegis_sdk_python-1.2.36}/taegis_sdk_python/services/__init__.py

@@ -5,7 +5,7 @@ This needs to be a generated file.  Need to make jinja template.
 import logging
 import threading
 from ssl import SSLContext
-from typing import Any, Dict, Optional, Union, Literal
+from typing import Any, Dict, Literal, Optional, Union
 
 import aiohttp
 from aiohttp.client_reqrep import Fingerprint
@@ -53,6 +53,7 @@ from taegis_sdk_python.services.nl_search import NlSearchService
 from taegis_sdk_python.services.notebooks import NotebooksService
 from taegis_sdk_python.services.notifications import NotificationsService
 from taegis_sdk_python.services.preferences import PreferencesService
+from taegis_sdk_python.services.process_trees import ProcessTreesService
 from taegis_sdk_python.services.queries import QueriesService
 from taegis_sdk_python.services.roadrunner import RoadrunnerService
 from taegis_sdk_python.services.rules import RulesService
@@ -199,6 +200,7 @@ class GraphQLService:
         self._notebooks = None
         self._notifications = None
         self._preferences = None
+        self._process_trees = None
         self._queries = None
         self._roadrunner = None
         self._rules = None
@@ -610,6 +612,13 @@ class GraphQLService:
             self._preferences = PreferencesService(self)
         return self._preferences
 
+    @property
+    def process_tress(self):
+        """Preferences Service Endpoint."""
+        if not self._process_trees:
+            self._process_trees = ProcessTreesService(self)
+        return self._process_trees
+
     @property
     def queries(self):
         """Queries Service Endpoint."""

taegis_sdk_python-1.2.36/taegis_sdk_python/services/process_trees/__init__.py

@@ -0,0 +1,32 @@
+""""ProcessTrees Service."""
+
+from taegis_sdk_python.service_core import ServiceCore
+from taegis_sdk_python.services.process_trees.mutations import (
+    TaegisSDKProcessTreesMutation,
+)
+from taegis_sdk_python.services.process_trees.queries import TaegisSDKProcessTreesQuery
+from taegis_sdk_python.services.process_trees.subscriptions import (
+    TaegisSDKProcessTreesSubscription,
+)
+
+
+class ProcessTreesService(ServiceCore):
+    """Taegis ProcessTrees Service."""
+
+    @property
+    def query(self):
+        if not self._queries:
+            self._queries = TaegisSDKProcessTreesQuery(self)
+        return self._queries
+
+    @property
+    def mutation(self):
+        if not self._mutations:
+            self._mutations = TaegisSDKProcessTreesMutation(self)
+        return self._mutations
+
+    @property
+    def subscription(self):
+        if not self._subscriptions:
+            self._subscriptions = TaegisSDKProcessTreesSubscription(self)
+        return self._subscriptions

taegis_sdk_python-1.2.36/taegis_sdk_python/services/process_trees/mutations.py

@@ -0,0 +1,33 @@
+"""ProcessTrees Mutation."""
+
+# pylint: disable=no-member, unused-argument, too-many-locals, duplicate-code, wildcard-import, unused-wildcard-import, cyclic-import
+
+
+# Autogenerated
+# DO NOT MODIFY
+
+from __future__ import annotations
+
+import logging
+from typing import TYPE_CHECKING, Any, Dict, List, Optional, Tuple, Union
+
+from taegis_sdk_python import GraphQLNoRowsInResultSetError
+from taegis_sdk_python._consts import TaegisEnum
+from taegis_sdk_python.services.process_trees.types import *
+from taegis_sdk_python.utils import (
+    build_output_string,
+    parse_union_result,
+    prepare_input,
+)
+
+if TYPE_CHECKING:  # pragma: no cover
+    from taegis_sdk_python.services.process_trees import ProcessTreesService
+
+log = logging.getLogger(__name__)
+
+
+class TaegisSDKProcessTreesMutation:
+    """Taegis Process_trees Mutation operations."""
+
+    def __init__(self, service: ProcessTreesService):
+        self.service = service

taegis_sdk_python-1.2.36/taegis_sdk_python/services/process_trees/queries.py

@@ -0,0 +1,83 @@
+"""ProcessTrees Query."""
+
+# pylint: disable=no-member, unused-argument, too-many-locals, duplicate-code, wildcard-import, unused-wildcard-import, cyclic-import
+
+
+# Autogenerated
+# DO NOT MODIFY
+
+from __future__ import annotations
+
+import logging
+from typing import TYPE_CHECKING, Any, Dict, List, Optional, Tuple, Union
+
+from taegis_sdk_python import GraphQLNoRowsInResultSetError
+from taegis_sdk_python.utils import (
+    build_output_string,
+    parse_union_result,
+    prepare_input,
+)
+from taegis_sdk_python._consts import TaegisEnum
+from taegis_sdk_python.services.process_trees.types import *
+
+if TYPE_CHECKING:  # pragma: no cover
+    from taegis_sdk_python.services.process_trees import ProcessTreesService
+
+log = logging.getLogger(__name__)
+
+
+class TaegisSDKProcessTreesQuery:
+    """Taegis Process_trees Query operations."""
+
+    def __init__(self, service: ProcessTreesService):
+        self.service = service
+
+    def get_process_children(
+        self,
+        tenant_id: str,
+        host_id: str,
+        process_correlation_id: str,
+        resource_id: Optional[str] = None,
+    ) -> Children:
+        """None."""
+        endpoint = "GetProcessChildren"
+
+        result = self.service.execute_query(
+            endpoint=endpoint,
+            variables={
+                "tenantID": prepare_input(tenant_id),
+                "hostID": prepare_input(host_id),
+                "processCorrelationID": prepare_input(process_correlation_id),
+                "resourceID": prepare_input(resource_id),
+            },
+            output=build_output_string(Children),
+        )
+        if result.get(endpoint) is not None:
+            return Children.from_dict(result.get(endpoint))
+        raise GraphQLNoRowsInResultSetError("for query GetProcessChildren")
+
+    def get_process_parent(
+        self,
+        tenant_id: str,
+        host_id: str,
+        parent_process_correlation_id: str,
+        resource_id: Optional[str] = None,
+    ) -> ProcessEvent:
+        """None."""
+        endpoint = "GetProcessParent"
+
+        result = self.service.execute_query(
+            endpoint=endpoint,
+            variables={
+                "tenantID": prepare_input(tenant_id),
+                "hostID": prepare_input(host_id),
+                "parentProcessCorrelationID": prepare_input(
+                    parent_process_correlation_id
+                ),
+                "resourceID": prepare_input(resource_id),
+            },
+            output=build_output_string(ProcessEvent),
+        )
+        if result.get(endpoint) is not None:
+            return ProcessEvent.from_dict(result.get(endpoint))
+        raise GraphQLNoRowsInResultSetError("for query GetProcessParent")

taegis_sdk_python-1.2.36/taegis_sdk_python/services/process_trees/subscriptions.py

@@ -0,0 +1,33 @@
+"""ProcessTrees Subscription."""
+
+# pylint: disable=no-member, unused-argument, too-many-locals, duplicate-code, wildcard-import, unused-wildcard-import, cyclic-import
+
+
+# Autogenerated
+# DO NOT MODIFY
+
+from __future__ import annotations
+
+import logging
+from typing import TYPE_CHECKING, Any, Dict, List, Optional, Tuple, Union
+
+from taegis_sdk_python import GraphQLNoRowsInResultSetError
+from taegis_sdk_python._consts import TaegisEnum
+from taegis_sdk_python.services.process_trees.types import *
+from taegis_sdk_python.utils import (
+    build_output_string,
+    parse_union_result,
+    prepare_input,
+)
+
+if TYPE_CHECKING:  # pragma: no cover
+    from taegis_sdk_python.services.process_trees import ProcessTreesService
+
+log = logging.getLogger(__name__)
+
+
+class TaegisSDKProcessTreesSubscription:
+    """Taegis Process_trees Subscription operations."""
+
+    def __init__(self, service: ProcessTreesService):
+        self.service = service

taegis_sdk_python-1.2.36/taegis_sdk_python/services/process_trees/types.py

@@ -0,0 +1,96 @@
+"""ProcessTrees Types and Enums."""
+
+# pylint: disable=no-member, unused-argument, too-many-locals, duplicate-code
+
+# Autogenerated
+# DO NOT MODIFY
+
+from dataclasses import dataclass, field
+
+from typing import Any, Dict, List, Optional, Tuple, Union
+
+from dataclasses_json import config, dataclass_json
+
+
+@dataclass_json
+@dataclass(order=True, eq=True, frozen=True)
+class ProgramHash:
+    """ProgramHash."""
+
+    md5: Optional[str] = field(default=None, metadata=config(field_name="md5"))
+    sha1: Optional[str] = field(default=None, metadata=config(field_name="sha1"))
+    sha256: Optional[str] = field(default=None, metadata=config(field_name="sha256"))
+    sha512: Optional[str] = field(default=None, metadata=config(field_name="sha512"))
+
+
+@dataclass_json
+@dataclass(order=True, eq=True, frozen=True)
+class ProcessEvent:
+    """ProcessEvent."""
+
+    tenant_id: Optional[str] = field(
+        default=None, metadata=config(field_name="tenantID")
+    )
+    host_id: Optional[str] = field(default=None, metadata=config(field_name="hostID"))
+    process_correlation_id: Optional[str] = field(
+        default=None, metadata=config(field_name="processCorrelationID")
+    )
+    resource_id: Optional[str] = field(
+        default=None, metadata=config(field_name="resourceID")
+    )
+    parent_process_correlation_id: Optional[str] = field(
+        default=None, metadata=config(field_name="parentProcessCorrelationID")
+    )
+    process_id: Optional[str] = field(
+        default=None, metadata=config(field_name="processID")
+    )
+    parent_process_id: Optional[str] = field(
+        default=None, metadata=config(field_name="parentProcessID")
+    )
+    process_time_window: Optional[int] = field(
+        default=None, metadata=config(field_name="processTimeWindow")
+    )
+    process_creation_time: Optional[int] = field(
+        default=None, metadata=config(field_name="processCreationTime")
+    )
+    process_is_admin: Optional[bool] = field(
+        default=None, metadata=config(field_name="processIsAdmin")
+    )
+    real_pid: Optional[str] = field(default=None, metadata=config(field_name="realPid"))
+    commandline: Optional[str] = field(
+        default=None, metadata=config(field_name="commandline")
+    )
+    image_path: Optional[str] = field(
+        default=None, metadata=config(field_name="imagePath")
+    )
+    username: Optional[str] = field(
+        default=None, metadata=config(field_name="username")
+    )
+    user_is_admin: Optional[bool] = field(
+        default=None, metadata=config(field_name="userIsAdmin")
+    )
+    normalizer: Optional[str] = field(
+        default=None, metadata=config(field_name="normalizer")
+    )
+    sensor_type: Optional[str] = field(
+        default=None, metadata=config(field_name="sensorType")
+    )
+    children_count: Optional[int] = field(
+        default=None, metadata=config(field_name="childrenCount")
+    )
+    program_hash: Optional[ProgramHash] = field(
+        default=None, metadata=config(field_name="programHash")
+    )
+
+
+@dataclass_json
+@dataclass(order=True, eq=True, frozen=True)
+class Children:
+    """Children."""
+
+    children_count: Optional[int] = field(
+        default=None, metadata=config(field_name="childrenCount")
+    )
+    process_list: Optional[List[ProcessEvent]] = field(
+        default=None, metadata=config(field_name="processList")
+    )

{taegis_sdk_python-1.2.35 → taegis_sdk_python-1.2.36/taegis_sdk_python.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.2
 Name: taegis-sdk-python
-Version: 1.2.35
+Version: 1.2.36
 Summary: Taegis Python SDK
 Home-page: https://github.com/secureworks/taegis-sdk-python
 Author: Secureworks

{taegis_sdk_python-1.2.35 → taegis_sdk_python-1.2.36}/taegis_sdk_python.egg-info/SOURCES.txt

@@ -185,6 +185,11 @@ taegis_sdk_python/services/preferences/mutations.py
 taegis_sdk_python/services/preferences/queries.py
 taegis_sdk_python/services/preferences/subscriptions.py
 taegis_sdk_python/services/preferences/types.py
+taegis_sdk_python/services/process_trees/__init__.py
+taegis_sdk_python/services/process_trees/mutations.py
+taegis_sdk_python/services/process_trees/queries.py
+taegis_sdk_python/services/process_trees/subscriptions.py
+taegis_sdk_python/services/process_trees/types.py
 taegis_sdk_python/services/queries/__init__.py
 taegis_sdk_python/services/queries/mutations.py
 taegis_sdk_python/services/queries/queries.py

taegis_sdk_python-1.2.35/taegis_sdk_python/_version.py

@@ -1 +0,0 @@
-__version__ = "v1.2.35"