File tree Expand file tree Collapse file tree 2 files changed +17
-4
lines changed
uncoder-core/app/translator/platforms/sentinel_one Expand file tree Collapse file tree 2 files changed +17
-4
lines changed Original file line number Diff line number Diff line change
1
+ from app .translator .core .models .platform_details import PlatformDetails
2
+
3
+
4
+ PLATFORM_DETAILS = {"group_id" : "sentinel-one" , "group_name" : "SentinelOne" }
5
+
1
6
SENTINEL_ONE_EVENTS_QUERY_DETAILS = {
2
7
"platform_id" : "s1-events" ,
3
8
"name" : "SentinelOne Events Query" ,
4
- "group_name" : "SentinelOne" ,
5
- "group_id" : "sentinel-one" ,
6
9
"platform_name" : "Query (Events)" ,
10
+ ** PLATFORM_DETAILS ,
7
11
}
12
+
13
+ SENTINEL_ONE_POWER_QUERY_DETAILS = {
14
+ "platform_id" : "sentinel-one-power-query" ,
15
+ "name" : "SentinelOne Power Query" ,
16
+ "platform_name" : "Power Query" ,
17
+ ** PLATFORM_DETAILS ,
18
+ }
19
+
20
+ sentinel_one_events_query_details = PlatformDetails (** SENTINEL_ONE_EVENTS_QUERY_DETAILS )
Original file line number Diff line number Diff line change 20
20
from app .translator .core .models .platform_details import PlatformDetails
21
21
from app .translator .core .render_cti import RenderCTI
22
22
from app .translator .managers import render_cti_manager
23
- from app .translator .platforms .sentinel_one .const import SENTINEL_ONE_EVENTS_QUERY_DETAILS
23
+ from app .translator .platforms .sentinel_one .const import sentinel_one_events_query_details
24
24
from app .translator .platforms .sentinel_one .mappings .s1_cti import DEFAULT_S1EVENTS_MAPPING
25
25
26
26
27
27
@render_cti_manager .register
28
28
class S1EventsCTI (RenderCTI ):
29
- details : PlatformDetails = PlatformDetails ( ** SENTINEL_ONE_EVENTS_QUERY_DETAILS )
29
+ details : PlatformDetails = sentinel_one_events_query_details
30
30
31
31
field_value_template : str = '"{value}"'
32
32
or_operator : str = ", "
You can’t perform that action at this time.
0 commit comments