@cryptotaxi247 / CoPilot
Code Commits Issues Pulls Sessions CI/CD
main
main
ts 257 lines 5.69 KB
Raw
1 export interface MitreTechnique {
2 technique_id: string
3 technique_name: string
4 count: number
5 last_seen: string
6 tactics: MitreTactic[]
7 }
8
9 export interface MitreTactic {
10 id: string
11 name: string
12 short_name: string
13 }
14
15 export interface MitreTechniqueDetails {
16 description: string
17 name: string
18 id: string
19 modified_time: Date
20 created_time: Date
21 tactics: string[]
22 url: string
23 source: string
24 external_id: string
25 references: MitreReference[]
26 mitigations: string[]
27 subtechnique_of: string | null
28 techniques: string[] | null
29 groups: string[]
30 software: string[]
31 mitre_detection: string
32 mitre_version: string
33 deprecated: number
34 remote_support: number
35 network_requirements: number
36 platforms: string[]
37 data_sources: string[]
38 is_subtechnique: boolean
39 }
40
41 export interface MitreReference {
42 url: string
43 description: string
44 source: string
45 }
46
47 export interface MitreMitigationDetails {
48 mitre_version: string
49 deprecated: number
50 description: string
51 name: string
52 id: string
53 modified_time: Date
54 created_time: Date
55 techniques: string[]
56 references: MitreReference[]
57 url: string
58 source: string
59 external_id: string
60 }
61
62 export interface MitreSoftwareDetails {
63 mitre_version: string
64 deprecated: number
65 description: string
66 name: string
67 id: string
68 modified_time: Date
69 created_time: Date
70 groups: string[]
71 techniques: string[]
72 references: MitreReference[]
73 url: string
74 source: string
75 external_id: string
76 platforms: null | string[]
77 aliases: null | string[]
78 type: null | string
79 }
80
81 export interface MitreTacticDetails {
82 description: string
83 name: string
84 id: string
85 modified_time: Date
86 created_time: Date
87 short_name: string
88 techniques: string[]
89 references: MitreReference[]
90 url: string
91 source: string
92 external_id: string
93 }
94
95 export interface MitreGroupDetails {
96 mitre_version: string
97 deprecated: number
98 description: string
99 name: string
100 id: string
101 modified_time: Date
102 created_time: Date
103 software: string[]
104 techniques: string[]
105 references: MitreReference[]
106 url: string
107 source: string
108 external_id: string
109 aliases: null | string[]
110 country: null | string
111 }
112
113 export interface MitreEventDetails {
114 data_source_ip: string
115 data_host_architecture: string
116 agent_id: string
117 agent_name: string
118 gl2_remote_ip: string
119 data_resource: string
120 agent_labels_customer: string
121 data_ecs_version: string
122 timestamp_utc: Date
123 data_host_os_codename: string
124 syslog_type: string
125 gl2_source_node: string
126 id: string
127 data_dns_question_etld_plus_one: string
128 data_server_port: string
129 rule_mitre_tactic: string
130 gl2_accounted_message_size: number
131 data_agent_type: string
132 streams: string[]
133 rule_mitre_id: string
134 data_destination_bytes: string
135 data_event_dataset: string
136 "data_@metadata_beat": string
137 agent_ip: string
138 data_source_port: string
139 data_host_id: string
140 data_event_kind: string
141 data_network_protocol: string
142 dns_response_code: string
143 dns_query: string
144 data_dns_response_code: string
145 data_network_community_id: string
146 data_dns_flags_truncated_response: string
147 rule_mail: boolean
148 data_dns_opt_udp_size: string
149 data_event_category: string
150 data_dns_flags_recursion_available: string
151 data_dns_opt_version: string
152 timestamp: Date
153 data_host_mac: string
154 data_agent_id: string
155 data_destination_port: string
156 data_dns_type: string
157 traffic_direction: string
158 rule_id: string
159 data_dns_question_class: string
160 cluster_node: string
161 dst_port: string
162 "data_@timestamp": Date
163 data_event_duration: string
164 data_host_os_platform: string
165 data_host_name: string
166 data_dns_flags_recursion_desired: string
167 data_dns_question_subdomain: string
168 gl2_remote_port: number
169 data_host_os_type: string
170 source: string
171 gl2_source_input: string
172 rule_level: number
173 data_event_type: string
174 data_host_os_family: string
175 data_dns_additionals_count: string
176 data_dns_flags_authentic_data: string
177 protocol: string
178 data_dns_answers: string
179 data_event_start: Date
180 data_agent_ephemeral_id: string
181 rule_description: string
182 data_related_ip: string
183 data_agent_version: string
184 data_status: string
185 data_query: string
186 "data_@metadata_type": string
187 data_method: string
188 data_dns_question_registered_domain: string
189 data_server_ip: string
190 gl2_message_id: string
191 data_dns_answers_count: string
192 data_network_type: string
193 data_dns_opt_ext_rcode: string
194 data_client_port: string
195 data_network_bytes: string
196 data_dns_resolved_ip: string
197 data_host_containerized: string
198 true: number
199 data_host_hostname: string
200 rule_groups: string
201 data_client_bytes: string
202 data_dns_question_type: string
203 data_host_ip: string
204 data_destination_ip: string
205 rule_mitre_technique: string
206 rule_firedtimes: number
207 data_network_transport: string
208 dst_ip: string
209 src_ip: string
210 decoder_name: string
211 syslog_level: string
212 data_dns_op_code: string
213 data_host_os_version: string
214 data_host_os_kernel: string
215 cluster_name: string
216 data_source_bytes: string
217 gl2_processing_error: string
218 data_dns_opt_do: string
219 data_dns_authorities_count: string
220 data_dns_question_name: string
221 message: string
222 dns_answer: string
223 data_dns_id: string
224 src_port: string
225 manager_name: string
226 data_network_direction: string
227 data_dns_question_top_level_domain: string
228 data_event_end: Date
229 data_agent_name: string
230 data_client_ip: string
231 data_dns_flags_authoritative: string
232 data_server_bytes: string
233 data_type: string
234 data_dns_header_flags: string
235 data_dns_flags_checking_disabled: string
236 location: string
237 "data_@metadata_version": string
238 data_host_os_name: string
239 rule_group3: string
240 msg_timestamp: Date
241 rule_group2: string
242 rule_group1: string
243 }
244
245 export interface MitreAtomicTest {
246 technique_id: string
247 technique_name: string
248 test_count: number
249 categories: MitreAtomicTestCategory[]
250 has_prerequisites: boolean
251 }
252
253 export enum MitreAtomicTestCategory {
254 Linux = "linux",
255 Macos = "macos",
256 Windows = "windows"
257 }