go_sdk

Sep 26, 2024

Changes in this version

+ type Analysis_AnalyzeClient = grpc.ServerStreamingClient[Alert]

+ type Analysis_AnalyzeServer = grpc.ServerStreamingServer[Alert]

Sep 26, 2024

Changes in this version

+ func PointerOf[t any](s t) *t

Sep 25, 2024

Changes in this version

type Cast

+ Where *Where

+ func (x *Cast) GetWhere() *Where

type Csv

+ Where *Where

+ func (x *Csv) GetWhere() *Where

type Delete

+ Where *Where

+ func (x *Delete) GetWhere() *Where

type Dynamic

+ Where *Where

+ func (x *Dynamic) GetWhere() *Where

type Grok

+ Where *Where

+ func (x *Grok) GetWhere() *Where

type Json

+ Where *Where

+ func (x *Json) GetWhere() *Where

type Kv

+ Where *Where

+ func (x *Kv) GetWhere() *Where

type Reformat

+ Where *Where

+ func (x *Reformat) GetWhere() *Where

type Rename

+ Where *Where

+ func (x *Rename) GetWhere() *Where

type Trim

+ Where *Where

+ func (x *Trim) GetWhere() *Where

Sep 10, 2024

Changes in this version

type Grok

+ Source string

+ func (x *Grok) GetSource() string

type Kv

+ Source string

+ func (x *Kv) GetSource() string

Sep 3, 2024

Changes in this version

+ const Analysis_Analyze_FullMethodName

+ const Correlation_Correlate_FullMethodName

+ const Engine_Input_FullMethodName

+ const Engine_Notify_FullMethodName

+ const Integration_ProcessLog_FullMethodName

+ const Notification_Notify_FullMethodName

+ const NullValue_NULL_VALUE

+ const Parsing_ParseLog_FullMethodName

+ var Analysis_ServiceDesc = grpc.ServiceDesc

+ var Correlation_ServiceDesc = grpc.ServiceDesc

+ var Engine_ServiceDesc = grpc.ServiceDesc

+ var File_plugins_proto protoreflect.FileDescriptor

+ var Integration_ServiceDesc = grpc.ServiceDesc

+ var Notification_ServiceDesc = grpc.ServiceDesc

+ var NullValue_name = structpb.NullValue_name

+ var NullValue_value = structpb.NullValue_value

+ var Parsing_ServiceDesc = grpc.ServiceDesc

+ func CastBool(value interface{}) bool

+ func CastFloat64(value interface{}) float64

+ func CastInt64(value interface{}) int64

+ func CastString(value interface{}) string

+ func DoReq[response any](url string, data []byte, method string, headers map[string]string) (response, int, *logger.Error)

+ func Download(url, file string) *logger.Error

+ func GetCelType(t string) *cel.Type

+ func GetMainIP() (string, *logger.Error)

+ func GetValueOf(value gjson.Result) interface

+ func ListFiles(route string, filter string) []string

+ func Logger() *logger.Logger

+ func PluginCfg[t any](name string) (*t, *logger.Error)

+ func ReadCSV(url string) ([][]string, *logger.Error)

+ func ReadJSON[t any](f string) (*t, *logger.Error)

+ func ReadYAML[t any](f string) (*t, *logger.Error)

+ func RegisterAnalysisServer(s grpc.ServiceRegistrar, srv AnalysisServer)

+ func RegisterCorrelationServer(s grpc.ServiceRegistrar, srv CorrelationServer)

+ func RegisterEngineServer(s grpc.ServiceRegistrar, srv EngineServer)

+ func RegisterIntegrationServer(s grpc.ServiceRegistrar, srv IntegrationServer)

+ func RegisterNotificationServer(s grpc.ServiceRegistrar, srv NotificationServer)

+ func RegisterParsingServer(s grpc.ServiceRegistrar, srv ParsingServer)

+ func ToObject(str *string, object protoreflect.ProtoMessage) *logger.Error

+ func ToString(object protoreflect.ProtoMessage) (*string, *logger.Error)

+ type Ack struct

+ LastId string

+ func (*Ack) Descriptor() ([]byte, []int)

+ func (*Ack) ProtoMessage()

+ func (x *Ack) GetLastId() string

+ func (x *Ack) ProtoReflect() protoreflect.Message

+ func (x *Ack) Reset()

+ func (x *Ack) String() string

+ type Add struct

+ Function string

+ Params map[string]*anypb.Any

+ Where *Where

+ func (*Add) Descriptor() ([]byte, []int)

+ func (*Add) ProtoMessage()

+ func (x *Add) GetFunction() string

+ func (x *Add) GetParams() map[string]*anypb.Any

+ func (x *Add) GetWhere() *Where

+ func (x *Add) ProtoReflect() protoreflect.Message

+ func (x *Add) Reset()

+ func (x *Add) String() string

type Alert

+ func (*Alert) Descriptor() ([]byte, []int)

+ func (*Alert) ProtoMessage()

+ func (x *Alert) GetAdversary() *Side

+ func (x *Alert) GetCategory() string

+ func (x *Alert) GetDataSource() string

+ func (x *Alert) GetDataType() string

+ func (x *Alert) GetDescription() string

+ func (x *Alert) GetEvents() []*Event

+ func (x *Alert) GetId() string

+ func (x *Alert) GetImpact() *Impact

+ func (x *Alert) GetImpactScore() int32

+ func (x *Alert) GetLastUpdate() string

+ func (x *Alert) GetName() string

+ func (x *Alert) GetReferences() []string

+ func (x *Alert) GetSeverity() string

+ func (x *Alert) GetTarget() *Side

+ func (x *Alert) GetTechnique() string

+ func (x *Alert) GetTenantId() string

+ func (x *Alert) GetTenantName() string

+ func (x *Alert) GetTimestamp() string

+ func (x *Alert) ProtoReflect() protoreflect.Message

+ func (x *Alert) Reset()

+ func (x *Alert) String() string

+ type AnalysisClient interface

+ Analyze func(ctx context.Context, in *Event, opts ...grpc.CallOption) (*Alert, error)

+ func NewAnalysisClient(cc grpc.ClientConnInterface) AnalysisClient

+ type AnalysisServer interface

+ Analyze func(context.Context, *Event) (*Alert, error)

+ type Any = anypb.Any

+ type Asset struct

+ Availability int32

+ Confidentiality int32

+ Hostnames []string

+ IPs []string

+ Integrity int32

+ Name string

+ type Cast struct

+ Fields []string

+ To string

+ func (*Cast) Descriptor() ([]byte, []int)

+ func (*Cast) ProtoMessage()

+ func (x *Cast) GetFields() []string

+ func (x *Cast) GetTo() string

+ func (x *Cast) ProtoReflect() protoreflect.Message

+ func (x *Cast) Reset()

+ func (x *Cast) String() string

+ type Config struct

+ DisabledRules []int64

+ Env Env

+ Patterns map[string]string

+ Pipeline []Pipeline

+ Plugins map[string]map[string]interface{}

+ Tenants []Tenant

+ func GetCfg() *Config

+ type CorrelationClient interface

+ Correlate func(ctx context.Context, in *Alert, opts ...grpc.CallOption) (*emptypb.Empty, error)

+ func NewCorrelationClient(cc grpc.ClientConnInterface) CorrelationClient

+ type CorrelationServer interface

+ Correlate func(context.Context, *Alert) (*emptypb.Empty, error)

+ type Csv struct

+ Headers []string

+ Separator string

+ Source string

+ func (*Csv) Descriptor() ([]byte, []int)

+ func (*Csv) ProtoMessage()

+ func (x *Csv) GetHeaders() []string

+ func (x *Csv) GetSeparator() string

+ func (x *Csv) GetSource() string

+ func (x *Csv) ProtoReflect() protoreflect.Message

+ func (x *Csv) Reset()

+ func (x *Csv) String() string

+ type Delete struct

+ Fields []string

+ func (*Delete) Descriptor() ([]byte, []int)

+ func (*Delete) ProtoMessage()

+ func (x *Delete) GetFields() []string

+ func (x *Delete) ProtoReflect() protoreflect.Message

+ func (x *Delete) Reset()

+ func (x *Delete) String() string

+ type Drop struct

+ Where *Where

+ func (*Drop) Descriptor() ([]byte, []int)

+ func (*Drop) ProtoMessage()

+ func (x *Drop) GetWhere() *Where

+ func (x *Drop) ProtoReflect() protoreflect.Message

+ func (x *Drop) Reset()

+ func (x *Drop) String() string

+ type Dynamic struct

+ Params map[string]*anypb.Any

+ Plugin string

+ func (*Dynamic) Descriptor() ([]byte, []int)

+ func (*Dynamic) ProtoMessage()

+ func (x *Dynamic) GetParams() map[string]*anypb.Any

+ func (x *Dynamic) GetPlugin() string

+ func (x *Dynamic) ProtoReflect() protoreflect.Message

+ func (x *Dynamic) Reset()

+ func (x *Dynamic) String() string

+ type Empty = emptypb.Empty

+ type EngineClient interface

+ Input func(ctx context.Context, opts ...grpc.CallOption) (grpc.BidiStreamingClient[Log, Ack], error)

+ Notify func(ctx context.Context, opts ...grpc.CallOption) (grpc.BidiStreamingClient[Message, Ack], error)

+ func NewEngineClient(cc grpc.ClientConnInterface) EngineClient

+ type EngineServer interface

+ Input func(grpc.BidiStreamingServer[Log, Ack]) error

+ Notify func(grpc.BidiStreamingServer[Message, Ack]) error

+ type Engine_InputClient = grpc.BidiStreamingClient[Log, Ack]

+ type Engine_InputServer = grpc.BidiStreamingServer[Log, Ack]

+ type Engine_NotifyClient = grpc.BidiStreamingClient[Message, Ack]

+ type Engine_NotifyServer = grpc.BidiStreamingServer[Message, Ack]

+ type Env struct

+ LogLevel int

+ NodeGroups []string

+ NodeName string

+ Workdir string

type Event

+ Action string

+ ActionResult string

+ func (*Event) Descriptor() ([]byte, []int)

+ func (*Event) ProtoMessage()

+ func (x *Event) GetAction() string

+ func (x *Event) GetActionResult() string

+ func (x *Event) GetConnectionStatus() string

+ func (x *Event) GetDataSource() string

+ func (x *Event) GetDataType() string

+ func (x *Event) GetDeviceTime() string

+ func (x *Event) GetFrom() *Side

+ func (x *Event) GetId() string

+ func (x *Event) GetLocal() *Side

+ func (x *Event) GetLog() map[string]*structpb.Value

+ func (x *Event) GetProtocol() string

+ func (x *Event) GetRaw() string

+ func (x *Event) GetRemote() *Side

+ func (x *Event) GetStatusCode() int64

+ func (x *Event) GetTenantId() string

+ func (x *Event) GetTenantName() string

+ func (x *Event) GetTimestamp() string

+ func (x *Event) GetTo() *Side

+ func (x *Event) ProtoReflect() protoreflect.Message

+ func (x *Event) Reset()

+ func (x *Event) String() string

type Geolocation

+ Accuracy int32

+ CountryCode string

+ func (*Geolocation) Descriptor() ([]byte, []int)

+ func (*Geolocation) ProtoMessage()

+ func (x *Geolocation) GetAccuracy() int32

+ func (x *Geolocation) GetAsn() int64

+ func (x *Geolocation) GetAso() string

+ func (x *Geolocation) GetCity() string

+ func (x *Geolocation) GetCountry() string

+ func (x *Geolocation) GetCountryCode() string

+ func (x *Geolocation) GetLatitude() float64

+ func (x *Geolocation) GetLongitude() float64

+ func (x *Geolocation) ProtoReflect() protoreflect.Message

+ func (x *Geolocation) Reset()

+ func (x *Geolocation) String() string

+ type Grok struct

+ Patterns []*Pattern

+ func (*Grok) Descriptor() ([]byte, []int)

+ func (*Grok) ProtoMessage()

+ func (x *Grok) GetPatterns() []*Pattern

+ func (x *Grok) ProtoReflect() protoreflect.Message

+ func (x *Grok) Reset()

+ func (x *Grok) String() string

type Impact

+ func (*Impact) Descriptor() ([]byte, []int)

+ func (*Impact) ProtoMessage()

+ func (x *Impact) GetAvailability() int32

+ func (x *Impact) GetConfidentiality() int32

+ func (x *Impact) GetIntegrity() int32

+ func (x *Impact) ProtoReflect() protoreflect.Message

+ func (x *Impact) Reset()

+ func (x *Impact) String() string

+ type IntegrationClient interface

+ ProcessLog func(ctx context.Context, opts ...grpc.CallOption) (grpc.BidiStreamingClient[Log, Ack], error)

+ func NewIntegrationClient(cc grpc.ClientConnInterface) IntegrationClient

+ type IntegrationServer interface

+ ProcessLog func(grpc.BidiStreamingServer[Log, Ack]) error

+ type Integration_ProcessLogClient = grpc.BidiStreamingClient[Log, Ack]

+ type Integration_ProcessLogServer = grpc.BidiStreamingServer[Log, Ack]

+ type JLog struct

+ Log string

+ func (*JLog) Descriptor() ([]byte, []int)

+ func (*JLog) ProtoMessage()

+ func (x *JLog) GetLog() string

+ func (x *JLog) ProtoReflect() protoreflect.Message

+ func (x *JLog) Reset()

+ func (x *JLog) String() string

+ type Json struct

+ Source string

+ func (*Json) Descriptor() ([]byte, []int)

+ func (*Json) ProtoMessage()

+ func (x *Json) GetSource() string

+ func (x *Json) ProtoReflect() protoreflect.Message

+ func (x *Json) Reset()

+ func (x *Json) String() string

+ type Kv struct

+ FieldSplit string

+ ValueSplit string

+ func (*Kv) Descriptor() ([]byte, []int)

+ func (*Kv) ProtoMessage()

+ func (x *Kv) GetFieldSplit() string

+ func (x *Kv) GetValueSplit() string

+ func (x *Kv) ProtoReflect() protoreflect.Message

+ func (x *Kv) Reset()

+ func (x *Kv) String() string

+ type ListValue = structpb.ListValue

+ type Log struct

+ DataSource string

+ DataType string

+ Id string

+ Raw string

+ TenantId string

+ Timestamp string

+ func (*Log) Descriptor() ([]byte, []int)

+ func (*Log) ProtoMessage()

+ func (x *Log) GetDataSource() string

+ func (x *Log) GetDataType() string

+ func (x *Log) GetId() string

+ func (x *Log) GetRaw() string

+ func (x *Log) GetTenantId() string

+ func (x *Log) GetTimestamp() string

+ func (x *Log) ProtoReflect() protoreflect.Message

+ func (x *Log) Reset()

+ func (x *Log) String() string

+ type Message struct

+ Id string

+ Message string

+ Timestamp string

+ Topic string

+ func (*Message) Descriptor() ([]byte, []int)

+ func (*Message) ProtoMessage()

+ func (x *Message) GetId() string

+ func (x *Message) GetMessage() string

+ func (x *Message) GetTimestamp() string

+ func (x *Message) GetTopic() string

+ func (x *Message) ProtoReflect() protoreflect.Message

+ func (x *Message) Reset()

+ func (x *Message) String() string

+ type NotificationClient interface

+ Notify func(ctx context.Context, in *Message, opts ...grpc.CallOption) (*emptypb.Empty, error)

+ func NewNotificationClient(cc grpc.ClientConnInterface) NotificationClient

+ type NotificationServer interface

+ Notify func(context.Context, *Message) (*emptypb.Empty, error)

+ type NullValue = structpb.NullValue

+ type ParsingClient interface

+ ParseLog func(ctx context.Context, in *Transform, opts ...grpc.CallOption) (*JLog, error)

+ func NewParsingClient(cc grpc.ClientConnInterface) ParsingClient

+ type ParsingServer interface

+ ParseLog func(context.Context, *Transform) (*JLog, error)

+ type Pattern struct

+ FieldName string

+ Pattern string

+ func (*Pattern) Descriptor() ([]byte, []int)

+ func (*Pattern) ProtoMessage()

+ func (x *Pattern) GetFieldName() string

+ func (x *Pattern) GetPattern() string

+ func (x *Pattern) ProtoReflect() protoreflect.Message

+ func (x *Pattern) Reset()

+ func (x *Pattern) String() string

+ type Pipeline struct

+ DataTypes []string

+ Steps []Step

+ type Reformat struct

+ Fields []string

+ FromFormat string

+ Function string

+ ToFormat string

+ func (*Reformat) Descriptor() ([]byte, []int)

+ func (*Reformat) ProtoMessage()

+ func (x *Reformat) GetFields() []string

+ func (x *Reformat) GetFromFormat() string

+ func (x *Reformat) GetFunction() string

+ func (x *Reformat) GetToFormat() string

+ func (x *Reformat) ProtoReflect() protoreflect.Message

+ func (x *Reformat) Reset()

+ func (x *Reformat) String() string

+ type Rename struct

+ From []string

+ To string

+ func (*Rename) Descriptor() ([]byte, []int)

+ func (*Rename) ProtoMessage()

+ func (x *Rename) GetFrom() []string

+ func (x *Rename) GetTo() string

+ func (x *Rename) ProtoReflect() protoreflect.Message

+ func (x *Rename) Reset()

+ func (x *Rename) String() string

type Side

+ Geolocation *Geolocation

+ Ip string

+ Ips []string

+ Md5 string

+ Md5S []string

+ Sha1 string

+ Sha1S []string

+ Sha256 string

+ Sha256S []string

+ Url string

+ Urls []string

+ func (*Side) Descriptor() ([]byte, []int)

+ func (*Side) ProtoMessage()

+ func (x *Side) GetBytesReceived() float64

+ func (x *Side) GetBytesSent() float64

+ func (x *Side) GetCommand() string

+ func (x *Side) GetCommands() []string

+ func (x *Side) GetConnections() int64

+ func (x *Side) GetDomain() string

+ func (x *Side) GetDomains() []string

+ func (x *Side) GetEmail() string

+ func (x *Side) GetEmails() []string

+ func (x *Side) GetFile() string

+ func (x *Side) GetFiles() []string

+ func (x *Side) GetFqdn() string

+ func (x *Side) GetFqdns() []string

+ func (x *Side) GetFreeCpuPercent() int64

+ func (x *Side) GetFreeMemPercent() int64

+ func (x *Side) GetGeolocation() *Geolocation

+ func (x *Side) GetGeolocations() []*Geolocation

+ func (x *Side) GetGroup() string

+ func (x *Side) GetGroups() []string

+ func (x *Side) GetHost() string

+ func (x *Side) GetHosts() []string

+ func (x *Side) GetIp() string

+ func (x *Side) GetIps() []string

+ func (x *Side) GetMac() string

+ func (x *Side) GetMacs() []string

+ func (x *Side) GetMd5() string

+ func (x *Side) GetMd5S() []string

+ func (x *Side) GetPackagesReceived() int64

+ func (x *Side) GetPackagesSent() int64

+ func (x *Side) GetPath() string

+ func (x *Side) GetPaths() []string

+ func (x *Side) GetPort() int64

+ func (x *Side) GetPorts() []int64

+ func (x *Side) GetProcess() string

+ func (x *Side) GetProcesses() []string

+ func (x *Side) GetSha1() string

+ func (x *Side) GetSha1S() []string

+ func (x *Side) GetSha256() string

+ func (x *Side) GetSha256S() []string

+ func (x *Side) GetTotalCpuPercent() int64

+ func (x *Side) GetTotalMemPercent() int64

+ func (x *Side) GetUrl() string

+ func (x *Side) GetUrls() []string

+ func (x *Side) GetUsedCpuPercent() int64

+ func (x *Side) GetUsedMemPercent() int64

+ func (x *Side) GetUser() string

+ func (x *Side) GetUsers() []string

+ func (x *Side) ProtoReflect() protoreflect.Message

+ func (x *Side) Reset()

+ func (x *Side) String() string

+ type Step struct

+ Add *Add

+ Cast *Cast

+ Csv *Csv

+ Delete *Delete

+ Drop *Drop

+ Dynamic *Dynamic

+ Grok *Grok

+ Json *Json

+ Kv *Kv

+ Reformat *Reformat

+ Rename *Rename

+ Trim *Trim

+ func (*Step) Descriptor() ([]byte, []int)

+ func (*Step) ProtoMessage()

+ func (x *Step) GetAdd() *Add

+ func (x *Step) GetCast() *Cast

+ func (x *Step) GetCsv() *Csv

+ func (x *Step) GetDelete() *Delete

+ func (x *Step) GetDrop() *Drop

+ func (x *Step) GetDynamic() *Dynamic

+ func (x *Step) GetGrok() *Grok

+ func (x *Step) GetJson() *Json

+ func (x *Step) GetKv() *Kv

+ func (x *Step) GetReformat() *Reformat

+ func (x *Step) GetRename() *Rename

+ func (x *Step) GetTrim() *Trim

+ func (x *Step) ProtoReflect() protoreflect.Message

+ func (x *Step) Reset()

+ func (x *Step) String() string

+ type Struct = structpb.Struct

+ type Tenant struct

+ Assets []Asset

+ DisabledRules []int64

+ Id string

+ Name string

+ type Transform struct

+ Jlog *JLog

+ Step *Step

+ func (*Transform) Descriptor() ([]byte, []int)

+ func (*Transform) ProtoMessage()

+ func (x *Transform) GetJlog() *JLog

+ func (x *Transform) GetStep() *Step

+ func (x *Transform) ProtoReflect() protoreflect.Message

+ func (x *Transform) Reset()

+ func (x *Transform) String() string

+ type Trim struct

+ Fields []string

+ Function string

+ Substring string

+ func (*Trim) Descriptor() ([]byte, []int)

+ func (*Trim) ProtoMessage()

+ func (x *Trim) GetFields() []string

+ func (x *Trim) GetFunction() string

+ func (x *Trim) GetSubstring() string

+ func (x *Trim) ProtoReflect() protoreflect.Message

+ func (x *Trim) Reset()

+ func (x *Trim) String() string

+ type UnimplementedAnalysisServer struct

+ func (UnimplementedAnalysisServer) Analyze(context.Context, *Event) (*Alert, error)

+ type UnimplementedCorrelationServer struct

+ func (UnimplementedCorrelationServer) Correlate(context.Context, *Alert) (*emptypb.Empty, error)

+ type UnimplementedEngineServer struct

+ func (UnimplementedEngineServer) Input(grpc.BidiStreamingServer[Log, Ack]) error

+ func (UnimplementedEngineServer) Notify(grpc.BidiStreamingServer[Message, Ack]) error

+ type UnimplementedIntegrationServer struct

+ func (UnimplementedIntegrationServer) ProcessLog(grpc.BidiStreamingServer[Log, Ack]) error

+ type UnimplementedNotificationServer struct

+ func (UnimplementedNotificationServer) Notify(context.Context, *Message) (*emptypb.Empty, error)

+ type UnimplementedParsingServer struct

+ func (UnimplementedParsingServer) ParseLog(context.Context, *Transform) (*JLog, error)

+ type UnsafeAnalysisServer interface

+ type UnsafeCorrelationServer interface

+ type UnsafeEngineServer interface

+ type UnsafeIntegrationServer interface

+ type UnsafeNotificationServer interface

+ type UnsafeParsingServer interface

+ type Value = structpb.Value

+ type Value_BoolValue = structpb.Value_BoolValue

+ type Value_ListValue = structpb.Value_ListValue

+ type Value_NullValue = structpb.Value_NullValue

+ type Value_NumberValue = structpb.Value_NumberValue

+ type Value_StringValue = structpb.Value_StringValue

+ type Value_StructValue = structpb.Value_StructValue

+ type Variable struct

+ As string

+ Get string

+ OfType string

+ func (*Variable) Descriptor() ([]byte, []int)

+ func (*Variable) ProtoMessage()

+ func (x *Variable) GetAs() string

+ func (x *Variable) GetGet() string

+ func (x *Variable) GetOfType() string

+ func (x *Variable) ProtoReflect() protoreflect.Message

+ func (x *Variable) Reset()

+ func (x *Variable) String() string

+ type Where struct

+ Expression string

+ Variables []*Variable

+ func (*Where) Descriptor() ([]byte, []int)

+ func (*Where) ProtoMessage()

+ func (def *Where) Evaluate(event *string) bool

+ func (x *Where) GetExpression() string

+ func (x *Where) GetVariables() []*Variable

+ func (x *Where) ProtoReflect() protoreflect.Message

+ func (x *Where) Reset()

+ func (x *Where) String() string

Jun 10, 2024

Changes in this version

+ type Notification struct

+ Id *string

+ Message string

+ Timestamp string

+ Topic string

Jun 10, 2024

Changes in this version

type Alert

+ Category string

Jun 8, 2024

Changes in this version

type Alert

+ Description string

+ References []string

Jun 8, 2024

Changes in this version

type Alert

+ DataSource string

+ DataType string

Jun 8, 2024

Changes in this version

+ type Metadata struct

+ Author string

+ Description string

+ Name string

+ Type string

+ Version string

Jun 8, 2024

Changes in this version

+ type Alert struct

+ Adversary *Side

+ Events []Event

+ Id *string

+ Impact Impact

+ ImpactScore int

+ LastUpdate string

+ Name string

+ Severity string

+ Tactic string

+ Target *Side

+ Technique string

+ TenantId string

+ TenantName *string

+ Timestamp string

+ type Event struct

+ ConnectionStatus *string

+ DataSource string

+ DataType string

+ DeviceTime string

+ From *Side

+ Id *string

+ Local *Side

+ Log map[string]interface{}

+ Protocol *string

+ Raw *string

+ Remote *Side

+ StatusCode *int64

+ TenantId string

+ TenantName *string

+ Timestamp string

+ To *Side

+ type Geolocation struct

+ Asn *int64

+ Aso *string

+ City *string

+ Country *string

+ Latitude *float64

+ Longitude *float64

+ type Impact struct

+ Availability int

+ Confidentiality int

+ Integrity int

+ type Side struct

+ ASN *int64

+ ASO *string

+ BytesReceived *float64

+ BytesSent *float64

+ Command *string

+ Commands []string

+ Connections *int64

+ Domain *string

+ Domains []string

+ Email *string

+ Emails []string

+ File *string

+ Files []string

+ Fqdn *string

+ Fqdns []string

+ FreeCpuPercent *int64

+ FreeMemPercent *int64

+ Geolocations []Geolocation

+ Group *string

+ Groups []string

+ Host *string

+ Hosts []string

+ IP *string

+ IPs []string

+ MD5 *string

+ MD5s []string

+ Mac *string

+ Macs []string

+ PackagesReceived *int64

+ PackagesSent *int64

+ Path *string

+ Paths []string

+ Port *int64

+ Ports []int64

+ Process *string

+ Processes []string

+ SHA1 *string

+ SHA1s []string

+ SHA256 *string

+ SHA256s []string

+ TotalCpuPercent *int64

+ TotalMemPercent *int64

+ URL *string

+ URLs []string

+ UsedCpuPercent *int64

+ UsedMemPercent *int64

+ User *string

+ Users []string