taegis-sdk-python 1.2.36__tar.gz → 1.3.1__tar.gz

{taegis_sdk_python-1.2.36/taegis_sdk_python.egg-info → taegis_sdk_python-1.3.1}/PKG-INFO

@@ -1,6 +1,6 @@
-Metadata-Version: 2.2
+Metadata-Version: 2.4
 Name: taegis-sdk-python
-Version: 1.2.36
+Version: 1.3.1
 Summary: Taegis Python SDK
 Home-page: https://github.com/secureworks/taegis-sdk-python
 Author: Secureworks
@@ -29,6 +29,7 @@ Dynamic: classifier
 Dynamic: description
 Dynamic: description-content-type
 Dynamic: home-page
+Dynamic: license-file
 Dynamic: requires-dist
 Dynamic: requires-python
 Dynamic: summary

taegis_sdk_python-1.3.1/taegis_sdk_python/_version.py

@@ -0,0 +1 @@
+__version__ = "v1.3.1"

{taegis_sdk_python-1.2.36 → taegis_sdk_python-1.3.1}/taegis_sdk_python/services/agent/types.py

@@ -15,7 +15,7 @@ from dataclasses_json import config, dataclass_json
 
 
 from taegis_sdk_python._consts import TaegisEnum
-from taegis_sdk_python.utils import encode_enum, decode_enum
+from taegis_sdk_python.utils import encode_enum, decode_enum, parse_union_result
 
 
 class AgentArch(str, Enum):

{taegis_sdk_python-1.2.36 → taegis_sdk_python-1.3.1}/taegis_sdk_python/services/alerts/types.py

@@ -15,7 +15,7 @@ from dataclasses_json import config, dataclass_json
 
 
 from taegis_sdk_python._consts import TaegisEnum
-from taegis_sdk_python.utils import encode_enum, decode_enum
+from taegis_sdk_python.utils import encode_enum, decode_enum, parse_union_result
 
 
 class AggregateAlertsBySeverityInput_GroupBy(str, Enum):
@@ -1981,25 +1981,6 @@ class DeleteAlertsResponse:
     )
 
 
-@dataclass_json
-@dataclass(order=True, eq=True, frozen=True)
-class StructuredEntity:
-    """StructuredEntity."""
-
-    id: Optional[str] = field(default=None, metadata=config(field_name="id"))
-    identifiers: Optional[List[str]] = field(
-        default=None, metadata=config(field_name="identifiers")
-    )
-    perspective: Optional[Union[EntityPerspective, TaegisEnum]] = field(
-        default=None,
-        metadata=config(
-            encoder=encode_enum,
-            decoder=lambda x: decode_enum(EntityPerspective, x),
-            field_name="perspective",
-        ),
-    )
-
-
 @dataclass_json
 @dataclass(order=True, eq=True, frozen=True)
 class EvictResponse:
@@ -2825,6 +2806,32 @@ class AlertsMetadata:
     )
 
 
+Properties = Union[
+    EntityAuthDomain,
+    EntityCertificate,
+    EntityCloudObject,
+    EntityCloudResource,
+    EntityCloudUser,
+    EntityDnsServer,
+    EntityDomainName,
+    EntityEmail,
+    EntityEmailAddress,
+    EntityFile,
+    EntityFileHash,
+    EntityFunction,
+    EntityHost,
+    EntityIpAddress,
+    EntityProcess,
+    EntityRegistryKey,
+    EntityScheduledTask,
+    EntityScript,
+    EntityService,
+    EntityTaskAction,
+    EntityUser,
+    EntityUrl,
+]
+
+
 @dataclass_json
 @dataclass(order=True, eq=True, frozen=True)
 class GeoSummary_City:
@@ -2941,6 +2948,31 @@ class BulkInvestigationsResponse:
     )
 
 
+@dataclass_json
+@dataclass(order=True, eq=True, frozen=True)
+class StructuredEntity:
+    """StructuredEntity."""
+
+    id: Optional[str] = field(default=None, metadata=config(field_name="id"))
+    identifiers: Optional[List[str]] = field(
+        default=None, metadata=config(field_name="identifiers")
+    )
+    perspective: Optional[Union[EntityPerspective, TaegisEnum]] = field(
+        default=None,
+        metadata=config(
+            encoder=encode_enum,
+            decoder=lambda x: decode_enum(EntityPerspective, x),
+            field_name="perspective",
+        ),
+    )
+    properties: Optional[Properties] = field(
+        default=None,
+        metadata=config(
+            decoder=lambda x: parse_union_result(Properties, x), field_name="properties"
+        ),
+    )
+
+
 @dataclass_json
 @dataclass(order=True, eq=True, frozen=True)
 class UpdateInvestigationResponse:
@@ -3127,7 +3159,14 @@ class Alert2:
         default=None, metadata=config(field_name="threat_score_v2")
     )
     observation: Optional[bool] = field(
-        default=None, metadata=config(field_name="observation")
+        default=None,
+        metadata=config(
+            metadata={
+                "deprecated": True,
+                "deprecation_reason": "use threat_score_v2 value instead",
+            },
+            field_name="observation",
+        ),
     )
     metadata: Optional[AlertsMetadata] = field(
         default=None, metadata=config(field_name="metadata")
@@ -3260,29 +3299,3 @@ class AlertsResponse:
     alerts: Optional[AlertsList] = field(
         default=None, metadata=config(field_name="alerts")
     )
-
-
-Properties = Union[
-    EntityAuthDomain,
-    EntityCertificate,
-    EntityCloudObject,
-    EntityCloudResource,
-    EntityCloudUser,
-    EntityDnsServer,
-    EntityDomainName,
-    EntityEmail,
-    EntityEmailAddress,
-    EntityFile,
-    EntityFileHash,
-    EntityFunction,
-    EntityHost,
-    EntityIpAddress,
-    EntityProcess,
-    EntityRegistryKey,
-    EntityScheduledTask,
-    EntityScript,
-    EntityService,
-    EntityTaskAction,
-    EntityUser,
-    EntityUrl,
-]