mirrors/crowdsec
1
0
Fork 0
mirror of https://github.com/crowdsecurity/crowdsec.git synced 2025-05-11 12:25:53 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

pkg/cticlient: Add missing field in SmokeItem and FireItem (#3413)

Browse source 
* pkg/cticlient: Add missing field in SmokeItem and FireItem
This commit is contained in:
AlteredCoder 2025-01-20 11:21:25 +01:00 • committed by GitHub
parent ff9b350e0e
commit d6b3841f13
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 42 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

32
pkg/cticlient/types.go
View file

@ -64,6 +64,9 @@ type CTIReferences struct {
type SmokeItem struct {
IpRangeScore int `json:"ip_range_score"`
Ip string `json:"ip"`
Reputation string `json:"reputation"`
BackgroundNoise string `json:"background_noise"`
Confidence string `json:"confidence"`
IpRange *string `json:"ip_range"`
AsName *string `json:"as_name"`
AsNum *int `json:"as_num"`
@ -77,6 +80,7 @@ type SmokeItem struct {
BackgroundNoiseScore *int `json:"background_noise_score"`
Scores CTIScores `json:"scores"`
References []CTIReferences `json:"references"`
CVEs []string `json:"cves"`
IsOk bool `json:"-"`
}
@ -120,6 +124,10 @@ type FireItem struct {
BackgroundNoiseScore *int `json:"background_noise_score"`
Scores CTIScores `json:"scores"`
References []CTIReferences `json:"references"`
CVEs []string `json:"cves"`
Reputation string `json:"reputation"`
BackgroundNoise string `json:"background_noise"`
Confidence string `json:"confidence"`
State string `json:"state"`
Expiration CustomTime `json:"expiration"`
}
@ -209,6 +217,18 @@ func (c *SmokeItem) GetFalsePositives() []string {
return ret
}
func (c *SmokeItem) GetClassifications() []string {
ret := make([]string, 0)
if c.Classifications.Classifications != nil {
for _, b := range c.Classifications.Classifications {
ret = append(ret, b.Name)
}
}
return ret
}
func (c *SmokeItem) IsFalsePositive() bool {
if c.Classifications.FalsePositives != nil {
if len(c.Classifications.FalsePositives) > 0 {
@ -282,6 +302,18 @@ func (c *FireItem) GetFalsePositives() []string {
return ret
}
func (c *FireItem) GetClassifications() []string {
ret := make([]string, 0)
if c.Classifications.Classifications != nil {
for _, b := range c.Classifications.Classifications {
ret = append(ret, b.Name)
}
}
return ret
}
func (c *FireItem) IsFalsePositive() bool {
if c.Classifications.FalsePositives != nil {
if len(c.Classifications.FalsePositives) > 0 {

12
pkg/cticlient/types_test.go
View file

@ -40,8 +40,14 @@ func getSampleSmokeItem() SmokeItem {
DaysAge: 1,
},
Classifications: CTIClassifications{
FalsePositives: []CTIClassification{},
Classifications: []CTIClassification{},
FalsePositives: []CTIClassification{},
Classifications: []CTIClassification{
{
Name: "profile:likely_botnet",
Label: "Likely Botnet",
Description: "IP appears to be a botnet.",
},
},
},
AttackDetails: []*CTIAttackDetails{
{
@ -101,6 +107,7 @@ func TestBasicSmokeItem(t *testing.T) {
assert.Equal(t, 3, item.GetBackgroundNoiseScore())
assert.Equal(t, []string{}, item.GetFalsePositives())
assert.False(t, item.IsFalsePositive())
assert.Equal(t, []string{"profile:likely_botnet"}, item.GetClassifications())
}
func TestEmptySmokeItem(t *testing.T) {
@ -112,4 +119,5 @@ func TestEmptySmokeItem(t *testing.T) {
assert.Equal(t, 0, item.GetBackgroundNoiseScore())
assert.Equal(t, []string{}, item.GetFalsePositives())
assert.False(t, item.IsFalsePositive())
assert.Equal(t, []string{}, item.GetClassifications())
}