chore: Deprecate create_alert_route in general_alert.py and update process_image handling (#239)
taylor_socfortress committed
Jun 11, 2024 at 09:03 UTC
90c2b5870844bdbed711dd1ba28a2d8003534cc7
3 files changed
+8
-1
backend/app/integrations/alert_escalation/routes/general_alert.py
+1
@@ -18,6 +18,7 @@ integration_general_alerts_router = APIRouter()
18
response_model=CreateAlertResponse,
19
description="Manually create an alert in IRIS from Copilot WebUI",
20
dependencies=[Security(AuthHandler().require_any_scope("admin", "analyst"))],
21
+ deprecated=True,
22
)
23
async def create_alert_route(
24
create_alert_request: CreateAlertRequest,
backend/app/integrations/alert_escalation/services/escalate_alert.py
+5
-1
@@ -158,8 +158,12 @@ def get_process_image(source_dict: dict) -> str:
158
str: The process image.
159
"""
160
process_image = source_dict.get("process_image")
161
+ if not process_image:
162
+ process_image = source_dict.get("data_win_eventdata_image")
163
+ if not process_image:
164
+ process_image = source_dict.get("data_event_Image")
165
logger.info(f"Process image: {process_image}")
162
- return process_image if process_image else source_dict.get("data_win_eventdata_image")
166
+ return process_image
167
168
169
def get_process_name_from_image(process_image: str) -> str:
backend/app/integrations/monitoring_alert/services/wazuh.py
+2
@@ -274,6 +274,8 @@ async def get_process_name(source_dict: dict) -> List[str]:
274
process_image = source.get("process_image")
275
if process_image is None:
276
process_image = source.get("data_win_eventdata_image")
277
+ if process_image is None:
278
+ process_image = source.get("data_event_Image")
279
280
process_name = os.path.basename(process_image) if process_image else None
281
return [process_name] if process_name else ["No process name found"]