From 3400215ed38931a0f96964430a3e8947713bf139 Mon Sep 17 00:00:00 2001 From: Jonathan Branan Date: Tue, 20 Aug 2024 13:05:57 -0500 Subject: [PATCH] updated models --- inexDataModel.py | 53 +++++++++++++++++++++++++++++++++++++++++++++--- 1 file changed, 50 insertions(+), 3 deletions(-) diff --git a/inexDataModel.py b/inexDataModel.py index 82559d2..3db6542 100644 --- a/inexDataModel.py +++ b/inexDataModel.py @@ -1,5 +1,52 @@ def dataTemplate(transactionType,**kwargs): - uploadDownload = { + upload = { + "bytes" : kwargs.get('bytes'), + "dst_endpoint": { + "port": kwargs.get('dst_endpoint_port'), + "ip": kwargs.get('dst_endpoint_ip'), + "type": kwargs.get('dst_endpoint_type') + }, + "duration": kwargs.get('duration'), + "file": { + "created_time": kwargs.get('file_created_time'), + "uid": kwargs.get('file_uid'), + "size": kwargs.get('file_size'), + "name": kwargs.get('file_name'), + "path": kwargs.get('file_path') + }, + "guid": f'{transactionType.split("_")[1].rstrip("d").rstrip("e")}:{kwargs.get("guid")}', + "node_name": kwargs.get('node_name'), + "prd_ext_tenant_id": kwargs.get('prd_ext_tenant_id'), + "product_name": kwargs.get('product_name'), + "prd_ext_tenant_name": kwargs.get('prd_ext_tenant_name'), + "classifications": [{ + "ref_id": f"globalscape:{kwargs.get('guid')}", + "time": kwargs.get('time'), + }], + "session": { + "created_time": kwargs.get('time'), + "uid": kwargs.get('session_uid') + }, + "src_endpoint": { + "port": kwargs.get('src_endpoint_port'), + "ip": kwargs.get('src_endpoint_ip'), + "type": kwargs.get('src_endpoint_type') + }, + "tenant": kwargs.get('prd_ext_tenant_id'), + "tenant_name":"GlobalScape", + "time": kwargs.get('time'), + "status_code": kwargs.get('status_code'), + "status_detail": kwargs.get('status_detail'), + "user": { + "home_directory": kwargs.get('user_home_directory'), + "uuid": kwargs.get('guid'), + "uid": kwargs.get('user_uid'), + "type": kwargs.get('user_type'), + "name": kwargs.get('user_name') + }, + "utype": kwargs.get('utype') + } + download = { "bytes" : kwargs.get('bytes'), "dst_endpoint": { "port": kwargs.get('dst_endpoint_port'), @@ -132,9 +179,9 @@ def dataTemplate(transactionType,**kwargs): } if transactionType == "file_uploaded": - template = uploadDownload + template = upload if transactionType == "file_downloaded": - template = uploadDownload + template = download if transactionType == "file_deleted": template = fileDeleted if transactionType == "user_logged_on":