taegis-sdk-python 1.4.6__tar.gz → 1.4.7__tar.gz

{taegis_sdk_python-1.4.6/taegis_sdk_python.egg-info → taegis_sdk_python-1.4.7}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: taegis-sdk-python
-Version: 1.4.6
+Version: 1.4.7
 Summary: Taegis Python SDK
 Home-page: https://github.com/secureworks/taegis-sdk-python
 Author: Secureworks

taegis_sdk_python-1.4.7/taegis_sdk_python/_version.py

@@ -0,0 +1 @@
+__version__ = "v1.4.7"

{taegis_sdk_python-1.4.6 → taegis_sdk_python-1.4.7}/taegis_sdk_python/services/assets2/types.py

@@ -40,7 +40,7 @@ class EndpointTypeV2(str, Enum):
     ENDPOINT_SENTINELONE = "ENDPOINT_SENTINELONE"
     ENDPOINT_HARFANG_LAB = "ENDPOINT_HARFANG_LAB"
     ENDPOINT_SOPHOS_CIXA = "ENDPOINT_SOPHOS_CIXA"
-    ENDPOINT_SOPHOS_XDR = "ENDPOINT_SOPHOS_XDR"
+    ENDPOINT_SOPHOS = "ENDPOINT_SOPHOS"
 
 
 class FacetInfoOrderByInputV2(str, Enum):
@@ -1068,7 +1068,11 @@ class AssetWhereInputV2:
         default=None, metadata=config(field_name="cloudInstanceId_autocomplete")
     )
     connection_status: Optional[str] = field(
-        default=None, metadata=config(field_name="connectionStatus")
+        default=None,
+        metadata=config(
+            metadata={"deprecated": True, "deprecation_reason": "No longer supported"},
+            field_name="connectionStatus",
+        ),
     )
     created_at: Optional[str] = field(
         default=None, metadata=config(field_name="createdAt")
@@ -1221,6 +1225,9 @@ class AssetWhereInputV2:
     is_archived: Optional[str] = field(
         default=None, metadata=config(field_name="isArchived")
     )
+    reboot_required: Optional[bool] = field(
+        default=None, metadata=config(field_name="rebootRequired")
+    )
     and_: Optional[List["AssetWhereInputV2"]] = field(
         default=None, metadata=config(field_name="and")
     )
@@ -1354,6 +1361,9 @@ class AssetV2:
     uninstall: Optional[bool] = field(
         default=None, metadata=config(field_name="uninstall")
     )
+    reboot_required: Optional[bool] = field(
+        default=None, metadata=config(field_name="rebootRequired")
+    )
     hostnames: Optional[List[HostnameV2]] = field(
         default=None, metadata=config(field_name="hostnames")
     )
@@ -1483,6 +1493,7 @@ class AssetFilter:
     asset_state: Optional[List[Union[AssetState, TaegisEnum]]] = field(
         default=None,
         metadata=config(
+            metadata={"deprecated": True, "deprecation_reason": "No longer supported"},
             encoder=encode_enum,
             decoder=lambda x: decode_enum(AssetState, x),
             field_name="assetState",

{taegis_sdk_python-1.4.6 → taegis_sdk_python-1.4.7}/taegis_sdk_python/services/rules/queries.py

@@ -488,3 +488,39 @@ class TaegisSDKRulesQuery:
         if result.get(endpoint) is not None:
             return RuleFacetAggregationsOutput.from_dict(result.get(endpoint))
         raise GraphQLNoRowsInResultSetError("for query ruleFacetAggregations")
+
+    def ql_rules_tenants_details(
+        self, event_type: Union[RuleEventType, TaegisEnum]
+    ) -> List[QLTenants]:
+        """Returns a list of tenants, parents, and organizations with QL rules for the specified event type."""
+        endpoint = "qlRulesTenantsDetails"
+
+        result = self.service.execute_query(
+            endpoint=endpoint,
+            variables={
+                "eventType": prepare_input(event_type),
+            },
+            output=build_output_string(QLTenants),
+        )
+        if result.get(endpoint) is not None:
+            return QLTenants.schema().load(
+                [r or {} for r in result.get(endpoint)], many=True
+            )
+        raise GraphQLNoRowsInResultSetError("for query qlRulesTenantsDetails")
+
+    def ql_rules_tenants(
+        self, event_type: Union[RuleEventType, TaegisEnum]
+    ) -> List[str]:
+        """Returns a list of tenant IDs with QL rules for the specified event type."""
+        endpoint = "qlRulesTenants"
+
+        result = self.service.execute_query(
+            endpoint=endpoint,
+            variables={
+                "eventType": prepare_input(event_type),
+            },
+            output="",
+        )
+        if result.get(endpoint) is not None:
+            return result.get(endpoint)
+        raise GraphQLNoRowsInResultSetError("for query qlRulesTenants")

{taegis_sdk_python-1.4.6 → taegis_sdk_python-1.4.7}/taegis_sdk_python/services/rules/types.py

@@ -134,6 +134,15 @@ class RuleDay(str, Enum):
     SUNDAY = "Sunday"
 
 
+class QLTenantType(str, Enum):
+    """QLTenantType."""
+
+    QL_TENANT = "QLTenant"
+    QL_PARTNER = "QLPartner"
+    QL_ORGANIZATION = "QLOrganization"
+    QL_UNKNOWN = "QLUnknown"
+
+
 class RuleResolutionStatus(str, Enum):
     """RuleResolutionStatus."""
 
@@ -369,6 +378,15 @@ class AggregationPair:
     value: Optional[int] = field(default=None, metadata=config(field_name="value"))
 
 
+@dataclass_json
+@dataclass(order=True, eq=True, frozen=True)
+class QLTenantIDs:
+    """QLTenantIDs."""
+
+    id: Optional[str] = field(default=None, metadata=config(field_name="id"))
+    type: Optional[int] = field(default=None, metadata=config(field_name="type"))
+
+
 @dataclass_json
 @dataclass(order=True, eq=True, frozen=True)
 class TDRUser:
@@ -498,6 +516,22 @@ class RuleMetrics:
     )
 
 
+@dataclass_json
+@dataclass(order=True, eq=True, frozen=True)
+class QLTenants:
+    """QLTenants."""
+
+    tenant: Optional[str] = field(default=None, metadata=config(field_name="tenant"))
+    tenant_type: Optional[Union[QLTenantType, TaegisEnum]] = field(
+        default=None,
+        metadata=config(
+            encoder=encode_enum,
+            decoder=lambda x: decode_enum(QLTenantType, x),
+            field_name="tenantType",
+        ),
+    )
+
+
 @dataclass_json
 @dataclass(order=True, eq=True, frozen=True)
 class RuleCountResponse:
@@ -663,6 +697,9 @@ class SearchRulesByFieldInput:
     )
     cve: Optional[str] = field(default=None, metadata=config(field_name="cve"))
     vid: Optional[int] = field(default=None, metadata=config(field_name="vid"))
+    aggressive_threat_detection: Optional[bool] = field(
+        default=None, metadata=config(field_name="aggressiveThreatDetection")
+    )
     enabled: Optional[bool] = field(default=None, metadata=config(field_name="enabled"))
     deleted: Optional[bool] = field(default=None, metadata=config(field_name="deleted"))
     updated_at: Optional[str] = field(
@@ -753,6 +790,9 @@ class RuleInput:
         default=None, metadata=config(field_name="attackCategories")
     )
     enabled: Optional[bool] = field(default=None, metadata=config(field_name="enabled"))
+    aggressive_threat_detection: Optional[bool] = field(
+        default=None, metadata=config(field_name="aggressiveThreatDetection")
+    )
     event_type: Optional[Union[RuleEventType, TaegisEnum]] = field(
         default=None,
         metadata=config(
@@ -863,6 +903,9 @@ class Rule:
         default=None, metadata=config(field_name="confidence")
     )
     enabled: Optional[bool] = field(default=None, metadata=config(field_name="enabled"))
+    aggressive_threat_detection: Optional[bool] = field(
+        default=None, metadata=config(field_name="aggressiveThreatDetection")
+    )
     create_alert: Optional[bool] = field(
         default=None, metadata=config(field_name="createAlert")
     )

{taegis_sdk_python-1.4.6 → taegis_sdk_python-1.4.7}/taegis_sdk_python/services/trip/mutations.py

@@ -119,3 +119,22 @@ class TaegisSDKTripMutation:
         if result.get(endpoint) is not None:
             return ApiIntegrationUpdateResponse.from_dict(result.get(endpoint))
         raise GraphQLNoRowsInResultSetError("for mutation resumeApiIntegration")
+
+    def retry_api_integration_provisioning(
+        self, id_: int
+    ) -> ApiIntegrationUpdateResponse:
+        """Given a parent integration id, this will retry provisioning all child integrations if they are in a failed state."""
+        endpoint = "retryApiIntegrationProvisioning"
+
+        result = self.service.execute_mutation(
+            endpoint=endpoint,
+            variables={
+                "id": prepare_input(id_),
+            },
+            output=build_output_string(ApiIntegrationUpdateResponse),
+        )
+        if result.get(endpoint) is not None:
+            return ApiIntegrationUpdateResponse.from_dict(result.get(endpoint))
+        raise GraphQLNoRowsInResultSetError(
+            "for mutation retryApiIntegrationProvisioning"
+        )

{taegis_sdk_python-1.4.6 → taegis_sdk_python-1.4.7}/taegis_sdk_python/services/users/types.py

@@ -533,6 +533,29 @@ class PartnerRegistrationInput:
     )
 
 
+@dataclass_json
+@dataclass(order=True, eq=True, frozen=True)
+class UserIDExchangeDataResponse:
+    """UserIDExchangeDataResponse."""
+
+    id: Optional[str] = field(default=None, metadata=config(field_name="id"))
+    email: Optional[str] = field(default=None, metadata=config(field_name="email"))
+    given_name: Optional[str] = field(
+        default=None, metadata=config(field_name="given_name")
+    )
+    family_name: Optional[str] = field(
+        default=None, metadata=config(field_name="family_name")
+    )
+    preferred_language: Optional[Union[TDRUsersLanguage, TaegisEnum]] = field(
+        default=None,
+        metadata=config(
+            encoder=encode_enum,
+            decoder=lambda x: decode_enum(TDRUsersLanguage, x),
+            field_name="preferred_language",
+        ),
+    )
+
+
 @dataclass_json
 @dataclass(order=True, eq=True, frozen=True)
 class MigrateSSOUsersInput:

{taegis_sdk_python-1.4.6 → taegis_sdk_python-1.4.7/taegis_sdk_python.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: taegis-sdk-python
-Version: 1.4.6
+Version: 1.4.7
 Summary: Taegis Python SDK
 Home-page: https://github.com/secureworks/taegis-sdk-python
 Author: Secureworks

taegis_sdk_python-1.4.6/taegis_sdk_python/_version.py

@@ -1 +0,0 @@
-__version__ = "v1.4.6"