client

Documentation

Index

• Variables
• func NewEventExportEncoded(s, end time.Time, size int, t EventType) ([]byte, error)
• func NewEventSearchEncoded(s, end time.Time, size, next int, t EventType) ([]byte, error)
• type EventType
  • func (t EventType) String() string
• type SymantecClient
  • func NewSymantecClient(customerID, domainID, clientID, clientSecret string, mapper *ecs.Mapper) SymantecClient
  • func (s *SymantecClient) DoExportRequest(start, end time.Time, t EventType, size int) (mapStrArr []common.MapStr, err error)
  • func (s *SymantecClient) DoRetrieveSearchEvents(start time.Time, end time.Time, size int) (mapStrArr []common.MapStr, err error)
  • func (s *SymantecClient) GetOauthToken() error

Variables

var AllTypes = []EventType{
	ALL,
	AGENT_FRAMEWORK,
	APP_CONTROL,
	APP_CONTROL_LITE,
	APP_CONTROL_WHITELIST,
	APP_ISOLATION,
	BEHAVIORAL_ANALYSIS,
	COMPLIANCE,
	DATA_PROTECTION,
	DECEPTION,
	DETECTION_MONITORING,
	DETECTION_RESPONSE,
	DEVICE_CONTROL,
	EXPLOIT_PROTECTION,
	FIREWALL,
	LOCATION_MANAGEMENT,
	MALWARE_PROTECTION,
	NETWORK_INTEGRITY,
	NETWORK_IPS,
	POLICY_MANAGER,
	ROAMING_CLIENT,
	TAMPER_PROTECTION,
	TDAD_PROTECT,
	TELEMETRY,
	VR_ASSESSMENT,
	VR_REMEDIATION,
	WEB_SECURITY,
}

Functions

func NewEventExportEncoded

func NewEventExportEncoded(s, end time.Time, size int, t EventType) ([]byte, error)

NewEventExportEncoded create a []byte json encoded for doing a deprecated export request

func NewEventSearchEncoded

func NewEventSearchEncoded(s, end time.Time, size, next int, t EventType) ([]byte, error)

NewEventSearchEncoded create a []byte json encoded for doing a search request

Types

type EventType

type EventType int

EventType for types of request supported by Symantec Endpoint

const (
	ALL EventType = iota
	AGENT_FRAMEWORK
	APP_CONTROL
	APP_CONTROL_LITE
	APP_CONTROL_WHITELIST
	APP_ISOLATION
	BEHAVIORAL_ANALYSIS
	COMPLIANCE
	DATA_PROTECTION
	DECEPTION
	DETECTION_MONITORING
	DETECTION_RESPONSE
	DEVICE_CONTROL
	EXPLOIT_PROTECTION
	FIREWALL
	LOCATION_MANAGEMENT
	MALWARE_PROTECTION
	NETWORK_INTEGRITY
	NETWORK_IPS
	POLICY_MANAGER
	ROAMING_CLIENT
	TAMPER_PROTECTION
	TDAD_PROTECT
	TELEMETRY
	VR_ASSESSMENT
	VR_REMEDIATION
	WEB_SECURITY
)

func (EventType) String

func (t EventType) String() string

type SymantecClient

type SymantecClient struct {
	CustomerID   string
	DomainID     string
	ClientID     string
	ClientSecret string
	// contains filtered or unexported fields
}

func NewSymantecClient

func NewSymantecClient(customerID, domainID, clientID, clientSecret string, mapper *ecs.Mapper) SymantecClient

func (*SymantecClient) DoExportRequest

func (s *SymantecClient) DoExportRequest(start, end time.Time, t EventType, size int) (mapStrArr []common.MapStr, err error)

func (*SymantecClient) DoRetrieveSearchEvents

func (s *SymantecClient) DoRetrieveSearchEvents(start time.Time, end time.Time, size int) (mapStrArr []common.MapStr, err error)

func (*SymantecClient) GetOauthToken

func (s *SymantecClient) GetOauthToken() error