TIPCommon 2.1.0
La libreria TIPCommon 2.1.0 contiene i seguenti moduli:
TIPCommon.adapters
TIPCommon.base
parse_case_attachment()parse_case_comment()Action_soar_action_api_client_name_action_start_time_logger_paramsglobal_context_entity_types_entities_to_updatejson_results_attachments_contents_data_tables_html_reports_links_entity_insights_case_insights_result_value_output_message_error_output_messageaction_start_timeapi_clientattachmentscase_insightscontentsdata_tablesentities_to_updateentity_insightsentity_typeserror_output_messageexecution_statehtml_reportsis_first_runlinksloggernameoutput_messageparamsresult_valuerun()soar_action
EnrichActionActionParamTypeAttachmentCaseAttachmentCaseCommentCaseInsightCasePriorityCaseStageCloseCaseOrAlertInconclusiveRootCausesCloseCaseOrAlertMaintenanceRootCausesCloseCaseOrAlertMaliciousRootCausesCloseCaseOrAlertNotMaliciousRootCausesCloseCaseOrAlertReasonsContentDataTableEntityInsightEntityTypesEnumADDRESSALERTAPPLICATIONCHILD_HASHCHILD_PROCESSCLUSTERCONTAINERCREDIT_CARDCVECVE_IDDATABASEDEPLOYMENTDESTINATION_DOMAINDOMAINEMAIL_MESSAGEEVENTFILE_HASHFILE_NAMEGENERICHOST_NAMEIP_SETMAC_ADDRESSPARENT_HASHPARENT_PROCESSPHONE_NUMBERPODPROCESSSERVICESOURCE_DOMAINTHREAT_ACTORTHREAT_CAMPAIGNTHREAT_SIGNATUREURLUSBUSER
ExecutionStateFullDetailsConfigurationParameterHTMLReportIntegrationParamTypeLinkScriptParameterApiableAuthableLoggerSessionJobRefreshTokenRenewalJobSuccessFailureTuplevalidate_param_csv_to_multi_value()JobParameterActionJsonOutputActionOutputConnectorJsonOutputConnectorOutputalert_info_from_json()
TIPCommon.rest
build_credentials_from_sa()build_credentials_from_sa_attr()generate_jwt_from_credentials()generate_jwt_from_sa()get_adc()get_auth_request()get_impersonated_credentials()get_secops_siem_tenant_credentials()GcpErrorReasonGcpPermissionsextract_project_id_from_sa_email()extract_project_id_from_sa_key()get_http_client()get_workload_sa_email()retrieve_project_id()validate_impersonation()get_auth_session()SoarApiErrorServerbatch_set_custom_field_values()get_alert_events()get_case_attachments()get_case_overview_details()get_connector_cards()get_entity_data()get_env_action_def_files()get_federation_cases()get_full_case_details()get_installed_integrations_of_environment()get_installed_jobs()get_integration_full_details()get_user_profile_cards()get_workflow_instance_card()list_custom_field_values()list_custom_fields()remove_case_tag()save_attachment_to_case_wall()set_alert_priority()set_case_score_bulk()set_custom_field_values()validate_response()
data_models Modulo
AlertCardAlertEventAlertPriorityBaseAlertBaseDataModelCaseDataStatusCaseDetailsCasePriorityCaseWallAttachmentConnectorCardConnectorConnectivityStatusEnumConnectorParamTypesConnectorParameterContainerCustomFieldCustomFieldScopeCustomFieldValueDatabaseContextTypeEventPropertyFieldFieldGroupItemFieldItemFieldsGroupGoogleServiceAccountInstalledIntegrationInstanceJobParamTypeParameterSLAScriptContextaction_definition_namealert_idasync_polling_interval_in_secasync_total_duration_deadlinecase_idconnector_contextdefault_result_valueenvironmentenvironment_api_keyexecution_deadline_unix_time_msintegration_identifierintegration_instancejob_api_keymax_json_result_sizeoriginal_requesting_userparametersscript_timeout_deadlinetarget_entitiesunique_identifieruse_proxy_settingsvault_settingsworkflow_idworkflow_instance_idto_json()update()
SmimeEmailConfigSmimeTypeTypedContainerUserProfileCard
encryption Modulo
exceptions Modulo
ActionSetupErrorAlreadyExistsErrorBadGatewayErrorCaseResultErrorConnectorContextErrorConnectorProcessingErrorConnectorSetupErrorConnectorValidationErrorDeadlineExceededErrorEmptyMandatoryValuesEnrichActionErrorFailedPreconditionErrorGeneralActionExceptionGeneralConnectorExceptionGeneralJobExceptionGoogleCloudExceptionImpersonationUnauthorizedErrorInternalJSONDecoderErrorInvalidArgumentErrorInvalidTimeExceptionJobSetupErrorNotFoundErrorOauthErrorParameterExtractionErrorParameterValidationErrorPermissionDeniedErrorRefreshTokenRenewalJobExceptionResourceExhaustedErrorSDKWrapperErrorSMIMEMailErrorUnauthenticatedErrorUnavailableError
extraction Modulo
extract_action_param()extract_configuration_param()extract_connector_param()extract_job_param()extract_script_param()get_connector_detailed_params()
filters Modulo
filter_list_by_type()filter_none_kwargs()filter_old_alerts()filter_old_ids()filter_old_ids_by_timestamp()pass_whitelist_filter()
ouath Modulo
AuthenticationErrorAuthorizedOauthClientCredStorageEncryptionErrorOAuthAdapterOauthManagerOauthToken
smp_io Modulo
read_and_repair_existing_content()read_content()read_ids()read_ids_by_timestamp()write_content()write_ids()write_ids_with_timestamp()
smp_time Modulo
change_timezone()convert_string_to_timestamp()datetime_to_rfc3339()get_last_success_time()get_timestamps()get_timestamps_from_range()is_approaching_action_timeout()is_approaching_timeout()save_timestamp()siemplify_fetch_timestamp()siemplify_save_timestamp()validate_timestamp()
soar_ops Modulo
create_slo_message()get_clean_comment_body()get_file()get_secops_mode()get_soar_case_comments()get_user_by_id()get_user_profile_cards_with_pagination()is_slo_comment()remove_prefix_from_comments()save_file()
transformation Modulo
add_prefix_to_dict()add_prefix_to_dict_keys()adjust_to_csv()construct_csv()convert_comma_separated_to_list()convert_dict_to_json_result_dict()convert_list_to_comma_string()dict_to_flat()flat_dict_to_csv()get_unicode()removeprefix()removesuffix()rename_dict_key()string_to_multi_value()
utils Modulo
camel_to_snake_case()cast_keys_to_int()clean_result()create_and_write_to_tempfiles()get_entity_original_identifier()get_function_arg_names()get_unique_items_by_difference()is_empty_string_or_none()is_first_run()is_overflowed()is_python_37()is_test_run()none_to_default_value()platform_supports_1p_api()platform_supports_db()safe_cast_bool_value_from_str()safe_cast_int_value_from_str()
validation Modulo
Hai bisogno di ulteriore assistenza? Ricevi risposte dai membri della community e dai professionisti di Google SecOps.