TIPCommon 2.1.0
A biblioteca TIPCommon 2.1.0 contém os seguintes módulos:
TIPCommon.adapters
TIPCommon.base
parse_case_attachment()parse_case_comment()Action_soar_action_api_client_name_action_start_time_logger_paramsglobal_context_entity_types_entities_to_updatejson_results_attachments_contents_data_tables_html_reports_links_entity_insights_case_insights_result_value_output_message_error_output_messageaction_start_timeapi_clientattachmentscase_insightscontentsdata_tablesentities_to_updateentity_insightsentity_typeserror_output_messageexecution_statehtml_reportsis_first_runlinksloggernameoutput_messageparamsresult_valuerun()soar_action
EnrichActionActionParamTypeAttachmentCaseAttachmentCaseCommentCaseInsightCasePriorityCaseStageCloseCaseOrAlertInconclusiveRootCausesCloseCaseOrAlertMaintenanceRootCausesCloseCaseOrAlertMaliciousRootCausesCloseCaseOrAlertNotMaliciousRootCausesCloseCaseOrAlertReasonsContentDataTableEntityInsightEntityTypesEnumADDRESSALERTAPPLICATIONCHILD_HASHCHILD_PROCESSCLUSTERCONTAINERCREDIT_CARDCVECVE_IDDATABASEDEPLOYMENTDESTINATION_DOMAINDOMAINEMAIL_MESSAGEEVENTFILE_HASHFILE_NAMEGENERICHOST_NAMEIP_SETMAC_ADDRESSPARENT_HASHPARENT_PROCESSPHONE_NUMBERPODPROCESSSERVICESOURCE_DOMAINTHREAT_ACTORTHREAT_CAMPAIGNTHREAT_SIGNATUREURLUSBUSER
ExecutionStateFullDetailsConfigurationParameterHTMLReportIntegrationParamTypeLinkScriptParameterApiableAuthableLoggerSessionJobRefreshTokenRenewalJobSuccessFailureTuplevalidate_param_csv_to_multi_value()JobParameterActionJsonOutputActionOutputConnectorJsonOutputConnectorOutputalert_info_from_json()
TIPCommon.rest
build_credentials_from_sa()build_credentials_from_sa_attr()generate_jwt_from_credentials()generate_jwt_from_sa()get_adc()get_auth_request()get_impersonated_credentials()get_secops_siem_tenant_credentials()GcpErrorReasonGcpPermissionsextract_project_id_from_sa_email()extract_project_id_from_sa_key()get_http_client()get_workload_sa_email()retrieve_project_id()validate_impersonation()get_auth_session()SoarApiErrorServerbatch_set_custom_field_values()get_alert_events()get_case_attachments()get_case_overview_details()get_connector_cards()get_entity_data()get_env_action_def_files()get_federation_cases()get_full_case_details()get_installed_integrations_of_environment()get_installed_jobs()get_integration_full_details()get_user_profile_cards()get_workflow_instance_card()list_custom_field_values()list_custom_fields()remove_case_tag()save_attachment_to_case_wall()set_alert_priority()set_case_score_bulk()set_custom_field_values()validate_response()
Módulo data_models
AlertCardAlertEventAlertPriorityBaseAlertBaseDataModelCaseDataStatusCaseDetailsCasePriorityCaseWallAttachmentConnectorCardConnectorConnectivityStatusEnumConnectorParamTypesConnectorParameterContainerCustomFieldCustomFieldScopeCustomFieldValueDatabaseContextTypeEventPropertyFieldFieldGroupItemFieldItemFieldsGroupGoogleServiceAccountInstalledIntegrationInstanceJobParamTypeParameterSLAScriptContextaction_definition_namealert_idasync_polling_interval_in_secasync_total_duration_deadlinecase_idconnector_contextdefault_result_valueenvironmentenvironment_api_keyexecution_deadline_unix_time_msintegration_identifierintegration_instancejob_api_keymax_json_result_sizeoriginal_requesting_userparametersscript_timeout_deadlinetarget_entitiesunique_identifieruse_proxy_settingsvault_settingsworkflow_idworkflow_instance_idto_json()update()
SmimeEmailConfigSmimeTypeTypedContainerUserProfileCard
Módulo encryption
Módulo exceptions
ActionSetupErrorAlreadyExistsErrorBadGatewayErrorCaseResultErrorConnectorContextErrorConnectorProcessingErrorConnectorSetupErrorConnectorValidationErrorDeadlineExceededErrorEmptyMandatoryValuesEnrichActionErrorFailedPreconditionErrorGeneralActionExceptionGeneralConnectorExceptionGeneralJobExceptionGoogleCloudExceptionImpersonationUnauthorizedErrorInternalJSONDecoderErrorInvalidArgumentErrorInvalidTimeExceptionJobSetupErrorNotFoundErrorOauthErrorParameterExtractionErrorParameterValidationErrorPermissionDeniedErrorRefreshTokenRenewalJobExceptionResourceExhaustedErrorSDKWrapperErrorSMIMEMailErrorUnauthenticatedErrorUnavailableError
Módulo extraction
extract_action_param()extract_configuration_param()extract_connector_param()extract_job_param()extract_script_param()get_connector_detailed_params()
Módulo filters
filter_list_by_type()filter_none_kwargs()filter_old_alerts()filter_old_ids()filter_old_ids_by_timestamp()pass_whitelist_filter()
Módulo ouath
AuthenticationErrorAuthorizedOauthClientCredStorageEncryptionErrorOAuthAdapterOauthManagerOauthToken
Módulo smp_io
read_and_repair_existing_content()read_content()read_ids()read_ids_by_timestamp()write_content()write_ids()write_ids_with_timestamp()
Módulo smp_time
change_timezone()convert_string_to_timestamp()datetime_to_rfc3339()get_last_success_time()get_timestamps()get_timestamps_from_range()is_approaching_action_timeout()is_approaching_timeout()save_timestamp()siemplify_fetch_timestamp()siemplify_save_timestamp()validate_timestamp()
Módulo soar_ops
create_slo_message()get_clean_comment_body()get_file()get_secops_mode()get_soar_case_comments()get_user_by_id()get_user_profile_cards_with_pagination()is_slo_comment()remove_prefix_from_comments()save_file()
Módulo transformation
add_prefix_to_dict()add_prefix_to_dict_keys()adjust_to_csv()construct_csv()convert_comma_separated_to_list()convert_dict_to_json_result_dict()convert_list_to_comma_string()dict_to_flat()flat_dict_to_csv()get_unicode()removeprefix()removesuffix()rename_dict_key()string_to_multi_value()
Módulo utils
camel_to_snake_case()cast_keys_to_int()clean_result()create_and_write_to_tempfiles()get_entity_original_identifier()get_function_arg_names()get_unique_items_by_difference()is_empty_string_or_none()is_first_run()is_overflowed()is_python_37()is_test_run()none_to_default_value()platform_supports_1p_api()platform_supports_db()safe_cast_bool_value_from_str()safe_cast_int_value_from_str()
Módulo validation
Precisa de mais ajuda? Receba respostas de membros da comunidade e profissionais do Google SecOps.