taegis-sdk-python 1.6.8__tar.gz → 1.6.9.1a0__tar.gz

{taegis_sdk_python-1.6.8 → taegis_sdk_python-1.6.9.1a0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: taegis-sdk-python
-Version: 1.6.8
+Version: 1.6.9.1a0
 Summary: Taegis Python SDK
 Project-URL: Homepage, https://github.com/secureworks/taegis-sdk-python
 Project-URL: Bug Reports, https://github.com/secureworks/taegis-sdk-python/issues

{taegis_sdk_python-1.6.8 → taegis_sdk_python-1.6.9.1a0}/taegis_sdk_python/_version.py

@@ -1,3 +1,3 @@
 """Version idenitier."""
 
-__version__ = "1.6.8"
+__version__ = "1.6.9.1a0"

{taegis_sdk_python-1.6.8 → taegis_sdk_python-1.6.9.1a0}/taegis_sdk_python/services/__init__.py

@@ -73,6 +73,7 @@ from taegis_sdk_python.services.tenant_profiles import TenantProfilesService
 from taegis_sdk_python.services.tenants import TenantsService
 from taegis_sdk_python.services.tenants4 import Tenants4Service
 from taegis_sdk_python.services.threat import ThreatService
+from taegis_sdk_python.services.threat_publications import ThreatPublicationsService
 from taegis_sdk_python.services.threat_score import ThreatScoreService
 from taegis_sdk_python.services.trigger_action import TriggerActionService
 from taegis_sdk_python.services.trip import TripService
@@ -237,6 +238,7 @@ class GraphQLService:
         self._tenants = None
         self._tenants4 = None
         self._threat = None
+        self._threat_publications = None
         self._threat_score = None
         self._trigger_action = None
         self._trip = None
@@ -842,6 +844,13 @@ class GraphQLService:
             self._threat = ThreatService(self)
         return self._threat
 
+    @property
+    def threat_publications(self):
+        """Threat Publications Service Endpoint."""
+        if not self._threat_publications:
+            self._threat_publications = ThreatPublicationsService(self)
+        return self._threat_publications
+
     @property
     def threat_score(self):
         """ThreatScore Service Endpoint."""

{taegis_sdk_python-1.6.8 → taegis_sdk_python-1.6.9.1a0}/taegis_sdk_python/services/alerts/types.py

@@ -871,6 +871,9 @@ class EntityHost:
     sensor_type: Optional[str] = field(
         default=None, metadata=config(field_name="sensor_type")
     )
+    system_type: Optional[str] = field(
+        default=None, metadata=config(field_name="system_type")
+    )
     vendor_agent_device_id: Optional[str] = field(
         default=None, metadata=config(field_name="vendor_agent_device_id")
     )
@@ -919,6 +922,9 @@ class EntityIpAddress:
     ip_geo_country_geoname_id: Optional[int] = field(
         default=None, metadata=config(field_name="ip_geo_country_geoname_id")
     )
+    ip_geo_hash: Optional[str] = field(
+        default=None, metadata=config(field_name="ip_geo_hash")
+    )
     ip_geo_latitude: Optional[float] = field(
         default=None, metadata=config(field_name="ip_geo_latitude")
     )
@@ -1109,6 +1115,9 @@ class EntityUser:
     user_is_admin: Optional[bool] = field(
         default=None, metadata=config(field_name="user_is_admin")
     )
+    identity_types_csv: Optional[str] = field(
+        default=None, metadata=config(field_name="identity_types_csv")
+    )
 
 
 @dataclass_json
@@ -3105,6 +3114,7 @@ class StructuredEntity:
     display_name: Optional[str] = field(
         default=None, metadata=config(field_name="display_name")
     )
+    subtype: Optional[str] = field(default=None, metadata=config(field_name="subtype"))
     perspective: Optional[Union[EntityPerspective, TaegisEnum]] = field(
         default=None,
         metadata=config(

{taegis_sdk_python-1.6.8 → taegis_sdk_python-1.6.9.1a0}/taegis_sdk_python/services/detector_registry/types.py

@@ -93,6 +93,11 @@ class RegisteredDetector:
     updated_at: Optional[str] = field(
         default=None, metadata=config(field_name="updatedAt")
     )
+    attack_categories: Optional[List[str]] = field(
+        default=None, metadata=config(field_name="attackCategories")
+    )
+    cve: Optional[str] = field(default=None, metadata=config(field_name="cve"))
+    vid: Optional[int] = field(default=None, metadata=config(field_name="vid"))
     state: Optional[Union[STATE, TaegisEnum]] = field(
         default=None,
         metadata=config(

{taegis_sdk_python-1.6.8 → taegis_sdk_python-1.6.9.1a0}/taegis_sdk_python/services/notifications2/types.py

@@ -614,6 +614,9 @@ class UpdateNotificationRuleInput:
     robocall_playbook_instance_id: Optional[str] = field(
         default=None, metadata=config(field_name="robocallPlaybookInstanceID")
     )
+    feature_codes: Optional[List[str]] = field(
+        default=None, metadata=config(field_name="featureCodes")
+    )
     excluded_contact_methods: Optional[List[Union[ContactMethodType, TaegisEnum]]] = (
         field(
             default=None,
@@ -750,6 +753,9 @@ class CreateNotificationRuleInput:
     robocall_playbook_instance_id: Optional[str] = field(
         default=None, metadata=config(field_name="robocallPlaybookInstanceID")
     )
+    feature_codes: Optional[List[str]] = field(
+        default=None, metadata=config(field_name="featureCodes")
+    )
     type: Optional[Union[NotificationRuleType, TaegisEnum]] = field(
         default=None,
         metadata=config(
@@ -1015,6 +1021,9 @@ class NotificationRule:
     supports_acknowledgement: Optional[bool] = field(
         default=None, metadata=config(field_name="supportsAcknowledgement")
     )
+    feature_codes: Optional[List[str]] = field(
+        default=None, metadata=config(field_name="featureCodes")
+    )
     type: Optional[Union[NotificationRuleType, TaegisEnum]] = field(
         default=None,
         metadata=config(

taegis_sdk_python-1.6.9.1a0/taegis_sdk_python/services/threat_publications/__init__.py

@@ -0,0 +1,34 @@
+"""ThreatPublications Service."""
+
+from taegis_sdk_python.service_core import ServiceCore
+from taegis_sdk_python.services.threat_publications.mutations import (
+    TaegisSDKThreatPublicationsMutation,
+)
+from taegis_sdk_python.services.threat_publications.queries import (
+    TaegisSDKThreatPublicationsQuery,
+)
+from taegis_sdk_python.services.threat_publications.subscriptions import (
+    TaegisSDKThreatPublicationsSubscription,
+)
+
+
+class ThreatPublicationsService(ServiceCore):
+    """Taegis ThreatPublications Service."""
+
+    @property
+    def query(self):
+        if not self._queries:
+            self._queries = TaegisSDKThreatPublicationsQuery(self)
+        return self._queries
+
+    @property
+    def mutation(self):
+        if not self._mutations:
+            self._mutations = TaegisSDKThreatPublicationsMutation(self)
+        return self._mutations
+
+    @property
+    def subscription(self):
+        if not self._subscriptions:
+            self._subscriptions = TaegisSDKThreatPublicationsSubscription(self)
+        return self._subscriptions

taegis_sdk_python-1.6.9.1a0/taegis_sdk_python/services/threat_publications/mutations.py

@@ -0,0 +1,33 @@
+"""ThreatPublications Mutation."""
+
+# pylint: disable=no-member, unused-argument, too-many-locals, duplicate-code, wildcard-import, unused-wildcard-import, cyclic-import
+
+
+# Autogenerated
+# DO NOT MODIFY
+
+from __future__ import annotations
+
+import logging
+from typing import TYPE_CHECKING, Any, Dict, List, Optional, Tuple, Union
+
+from taegis_sdk_python import GraphQLNoRowsInResultSetError
+from taegis_sdk_python._consts import TaegisEnum
+from taegis_sdk_python.services.threat_publications.types import *
+from taegis_sdk_python.utils import (
+    build_output_string,
+    parse_union_result,
+    prepare_input,
+)
+
+if TYPE_CHECKING:  # pragma: no cover
+    from taegis_sdk_python.services.threat_publications import ThreatPublicationsService
+
+log = logging.getLogger(__name__)
+
+
+class TaegisSDKThreatPublicationsMutation:
+    """Taegis Threat_publications Mutation operations."""
+
+    def __init__(self, service: ThreatPublicationsService):
+        self.service = service

taegis_sdk_python-1.6.9.1a0/taegis_sdk_python/services/threat_publications/queries.py

@@ -0,0 +1,133 @@
+"""ThreatPublications Query."""
+
+# pylint: disable=no-member, unused-argument, too-many-locals, duplicate-code, wildcard-import, unused-wildcard-import, cyclic-import
+
+
+# Autogenerated
+# DO NOT MODIFY
+
+from __future__ import annotations
+
+import logging
+from typing import TYPE_CHECKING, Any, Dict, List, Optional, Tuple, Union
+
+from taegis_sdk_python import GraphQLNoRowsInResultSetError
+from taegis_sdk_python._consts import TaegisEnum
+from taegis_sdk_python.services.threat_publications.types import *
+from taegis_sdk_python.utils import (
+    build_output_string,
+    parse_union_result,
+    prepare_input,
+)
+
+if TYPE_CHECKING:  # pragma: no cover
+    from taegis_sdk_python.services.threat_publications import ThreatPublicationsService
+
+log = logging.getLogger(__name__)
+
+
+class TaegisSDKThreatPublicationsQuery:
+    """Taegis Threat_publications Query operations."""
+
+    def __init__(self, service: ThreatPublicationsService):
+        self.service = service
+
+    def threat_publication(
+        self,
+        id_: str,
+        content_format: Optional[Union[ContentFormat, TaegisEnum]] = None,
+    ) -> ThreatPublication:
+        """Retreives a publication by ID.."""
+        endpoint = "threatPublication"
+
+        result = self.service.execute_query(
+            endpoint=endpoint,
+            variables={
+                "ID": prepare_input(id_),
+                "contentFormat": prepare_input(content_format),
+            },
+            output=build_output_string(
+                ThreatPublication,
+                exclude_deprecated_output=self.service.exclude_deprecated_output,
+            ),
+        )
+        if result.get(endpoint) is not None:
+            return ThreatPublication.from_dict(result.get(endpoint))
+        raise GraphQLNoRowsInResultSetError("for query threatPublication")
+
+    def threat_publications(
+        self,
+        text: str,
+        content_format: Optional[Union[ContentFormat, TaegisEnum]] = None,
+    ) -> List[ThreatPublication]:
+        """Searches publications for text.."""
+        endpoint = "threatPublications"
+
+        result = self.service.execute_query(
+            endpoint=endpoint,
+            variables={
+                "text": prepare_input(text),
+                "contentFormat": prepare_input(content_format),
+            },
+            output=build_output_string(
+                ThreatPublication,
+                exclude_deprecated_output=self.service.exclude_deprecated_output,
+            ),
+        )
+        if result.get(endpoint) is not None:
+            return ThreatPublication.schema().load(
+                [r or {} for r in result.get(endpoint)], many=True
+            )
+        raise GraphQLNoRowsInResultSetError("for query threatPublications")
+
+    def threat_latest_publications(
+        self,
+        from_: int,
+        size: int,
+        content_format: Optional[Union[ContentFormat, TaegisEnum]] = None,
+    ) -> List[ThreatPublication]:
+        """Gets the latest publications from an offset with a size.."""
+        endpoint = "threatLatestPublications"
+
+        result = self.service.execute_query(
+            endpoint=endpoint,
+            variables={
+                "from": prepare_input(from_),
+                "size": prepare_input(size),
+                "contentFormat": prepare_input(content_format),
+            },
+            output=build_output_string(
+                ThreatPublication,
+                exclude_deprecated_output=self.service.exclude_deprecated_output,
+            ),
+        )
+        if result.get(endpoint) is not None:
+            return ThreatPublication.schema().load(
+                [r or {} for r in result.get(endpoint)], many=True
+            )
+        raise GraphQLNoRowsInResultSetError("for query threatLatestPublications")
+
+    def threat_publications_search(
+        self,
+        text: List[str],
+        content_format: Optional[Union[ContentFormat, TaegisEnum]] = None,
+    ) -> List[ThreatPublication]:
+        """Searches publications for array of text.."""
+        endpoint = "threatPublicationsSearch"
+
+        result = self.service.execute_query(
+            endpoint=endpoint,
+            variables={
+                "text": prepare_input(text),
+                "contentFormat": prepare_input(content_format),
+            },
+            output=build_output_string(
+                ThreatPublication,
+                exclude_deprecated_output=self.service.exclude_deprecated_output,
+            ),
+        )
+        if result.get(endpoint) is not None:
+            return ThreatPublication.schema().load(
+                [r or {} for r in result.get(endpoint)], many=True
+            )
+        raise GraphQLNoRowsInResultSetError("for query threatPublicationsSearch")

taegis_sdk_python-1.6.9.1a0/taegis_sdk_python/services/threat_publications/subscriptions.py

@@ -0,0 +1,33 @@
+"""ThreatPublications Subscription."""
+
+# pylint: disable=no-member, unused-argument, too-many-locals, duplicate-code, wildcard-import, unused-wildcard-import, cyclic-import
+
+
+# Autogenerated
+# DO NOT MODIFY
+
+from __future__ import annotations
+
+import logging
+from typing import TYPE_CHECKING, Any, Dict, List, Optional, Tuple, Union
+
+from taegis_sdk_python import GraphQLNoRowsInResultSetError
+from taegis_sdk_python._consts import TaegisEnum
+from taegis_sdk_python.services.threat_publications.types import *
+from taegis_sdk_python.utils import (
+    build_output_string,
+    parse_union_result,
+    prepare_input,
+)
+
+if TYPE_CHECKING:  # pragma: no cover
+    from taegis_sdk_python.services.threat_publications import ThreatPublicationsService
+
+log = logging.getLogger(__name__)
+
+
+class TaegisSDKThreatPublicationsSubscription:
+    """Taegis Threat_publications Subscription operations."""
+
+    def __init__(self, service: ThreatPublicationsService):
+        self.service = service

taegis_sdk_python-1.6.9.1a0/taegis_sdk_python/services/threat_publications/types.py

@@ -0,0 +1,63 @@
+"""ThreatPublications Types and Enums."""
+
+# pylint: disable=no-member, unused-argument, too-many-locals, duplicate-code
+
+# Autogenerated
+# DO NOT MODIFY
+
+from dataclasses import dataclass, field
+from enum import Enum
+from typing import Any, Dict, List, Optional, Tuple, Union
+
+from dataclasses_json import config, dataclass_json
+
+from taegis_sdk_python._consts import TaegisEnum
+from taegis_sdk_python.utils import decode_enum, encode_enum, parse_union_result
+
+
+class languageType(str, Enum):
+    """languageType."""
+
+    EN = "EN"
+    JA = "JA"
+
+
+class ContentFormat(str, Enum):
+    """ContentFormat."""
+
+    MD = "MD"
+    HTML = "HTML"
+    TEXT = "TEXT"
+    PDF = "PDF"
+
+
+@dataclass_json
+@dataclass(order=True, eq=True, frozen=True)
+class ThreatPublication:
+    """ThreatPublication."""
+
+    id: Optional[str] = field(default=None, metadata=config(field_name="id"))
+    type: Optional[str] = field(default=None, metadata=config(field_name="Type"))
+    name: Optional[str] = field(default=None, metadata=config(field_name="Name"))
+    description: Optional[str] = field(
+        default=None, metadata=config(field_name="Description")
+    )
+    published: Optional[str] = field(
+        default=None, metadata=config(field_name="Published")
+    )
+    content: Optional[str] = field(default=None, metadata=config(field_name="Content"))
+    tlp: Optional[str] = field(default=None, metadata=config(field_name="TLP"))
+    vid: Optional[str] = field(default=None, metadata=config(field_name="VID"))
+    report_id: Optional[str] = field(
+        default=None, metadata=config(field_name="ReportID")
+    )
+    reference: Optional[str] = field(
+        default=None, metadata=config(field_name="Reference")
+    )
+    category: Optional[str] = field(
+        default=None, metadata=config(field_name="Category")
+    )
+    language: Optional[str] = field(
+        default=None, metadata=config(field_name="Language")
+    )
+    pdf_url: Optional[str] = field(default=None, metadata=config(field_name="PDFUrl"))